What Federal Law Requires Before You Run a Background Check on a Driver?

Under 15 U.S.C. § 1681b(b)(2), before obtaining a consumer report for employment purposes, you must provide a clear and conspicuous written disclosure in a standalone document that consists solely of the disclosure, and you must obtain the applicant's written authorization. The disclosure cannot be buried in your employment application or combined with other forms.

The three non-negotiable steps under federal law are:

1. Standalone written disclosure: A separate document telling the applicant you may obtain a consumer report for employment purposes. It cannot include a liability waiver, an employment application, or any unrelated content.
2. Written authorization from the applicant: A signed authorization allowing you to pull the report. This can be on the same page as the disclosure but must be clearly separated from any other content.
3. Identification of the consumer reporting agency (CRA): If you use a specific background check vendor, some courts and the FTC expect transparency about who will conduct the report.

For CDL drivers, this applies to every background check — criminal history, driving record, employment verification, and any PSP report pulled through FMCSA's Pre-Employment Screening Program. Learn more about how FMCSA PSP reports work for small fleet driver screening and how they interact with FCRA obligations.

Does FMCSA Add Additional Disclosure Requirements on Top of FCRA?

Yes. 49 CFR 391.23 requires motor carriers to investigate each driver applicant's safety performance history with previous employers for the three years before hire. This includes a written consent from the driver before contacting prior carriers. FMCSA's consent requirement is separate from — and runs parallel to — FCRA's authorization requirement.

Here is how the two frameworks interact:

Maintaining all of these documents in the driver qualification file is mandatory. Review the complete driver qualification file checklist for 2026 to make sure every record is in order before your next audit.

What Happens If You Skip the Disclosure or Authorization Step?

Skipping or combining the disclosure with other documents creates immediate FCRA exposure. For negligent violations, actual damages plus attorney fees apply. For willful violations — which courts have found to include knowingly using a combined or embedded disclosure — statutory damages of $100 to $1,000 per applicant apply, plus punitive damages and attorney fees under 15 U.S.C. § 1681n.

The math is unforgiving for fleet operators:

• A company that hired 50 drivers using a flawed disclosure form faces up to $50,000 in statutory damages alone — before punitive damages or legal fees.
• FCRA class actions targeting trucking and logistics companies are an established litigation trend. Plaintiffs' attorneys actively recruit drivers who signed non-compliant disclosure forms.
• The EEOC can also investigate if your background check process has disparate impact on protected classes under Title VII of the Civil Rights Act.

What Is the Required Adverse Action Process When a Background Check Affects a Hiring Decision?

If information in a background check leads you to deny employment or take any adverse action against an applicant or current employee, FCRA mandates a two-step adverse action process under 15 U.S.C. § 1681b(b)(3). You must give the person a reasonable opportunity to dispute inaccurate information before the decision is final.

Step 1 — Pre-adverse action notice: Before making a final decision, send the applicant a copy of the background report, a copy of "A Summary of Your Rights Under the FCRA" (the FTC's official summary), and notice that you are considering taking adverse action based on the report.

Step 2 — Final adverse action notice: After a reasonable waiting period (generally considered 5 business days minimum, though FCRA does not specify an exact number), send a final adverse action notice that includes the CRA's name, address, and phone number; a statement that the CRA did not make the adverse decision; and the applicant's right to obtain a free report copy within 60 days.

Skipping either step is a separate FCRA violation. Each adverse action notice failure carries its own damages exposure.

Do State Laws Create Additional Background Check Disclosure Obligations for Trucking Companies?

Yes — and in many cases, state obligations are stricter than federal law. Trucking companies operating across multiple states or hiring in regulated jurisdictions must layer state requirements on top of FCRA. The most significant variations involve timing restrictions (when you can ask about criminal history) and additional written notice requirements.

What Is New in 2026 for Background Check Disclosure Requirements?

Several regulatory and enforcement developments in 2026 directly affect trucking employers running background checks. The FTC and CFPB have increased FCRA enforcement coordination, and state legislatures continue expanding disclosure requirements.

• FTC-CFPB Joint Enforcement: The Consumer Financial Protection Bureau's supervisory authority over large background check vendors is active in 2026, increasing pressure on CRAs to flag non-compliant employer authorization processes — which can trigger employer-side investigations.
• AI-Driven Screening Scrutiny: The EEOC issued updated guidance in 2025 (effective 2026) clarifying that AI-assisted background screening tools must still comply with FCRA disclosure requirements and that disparate impact analysis applies to algorithmic screening decisions.
• State Expansion: Minnesota's statewide ban-the-box law (effective January 1, 2024) is now fully enforced with penalties, and several states including Colorado have updated their FCRA supplement notice requirements for 2026.
• FMCSA Drug and Alcohol Clearinghouse: Full enforcement of the 49 CFR Part 382 Clearinghouse query requirements continues, and pre-employment Clearinghouse queries remain mandatory before a CDL driver can operate a CMV. The consent form for Clearinghouse queries must be maintained in the driver qualification file per 49 CFR 391.51.

How Should a Small Trucking Company Set Up a Compliant Background Check Process?

A small fleet operator needs a documented, repeatable process that produces compliant paperwork every time — not a verbal habit or a memory exercise. The process must generate the right documents in the right order, maintain signed copies, and trigger adverse action steps automatically when needed.

1. Use a standalone disclosure form that contains only the FCRA disclosure language and nothing else. Your attorney or a compliant HR platform should draft or review this form.
2. Obtain a signed written authorization before ordering any report. Keep the signed original in the applicant's file.
3. Use a permissible purpose code when ordering from your CRA — employment screening (not tenant screening).
4. For CDL drivers, collect FMCSA PSP consent on the FMCSA-issued form before pulling the PSP report.
5. Maintain all consent documents in the driver qualification file for the duration of employment plus 3 years per 49 CFR 391.51.
6. Build in a pre-adverse action hold — do not make a final hiring decision the same day you receive a concerning report.
7. Document individualized assessments when criminal history is involved, especially in ban-the-box states.

Trucking HR platforms purpose-built for small fleets — like HRForge's trucking HR automation platform — generate compliant disclosure and authorization forms automatically, track consent status across your driver roster, and flag when adverse action steps are required. This removes the process from your to-do list and puts it in a documented, auditable workflow.

Frequently Asked Questions

Can I include the background check disclosure in my employment application to save time?

No. The FCRA explicitly requires a standalone document that consists solely of the disclosure. Courts have repeatedly found that embedding the disclosure in an employment application — even on a separate page of the same document — constitutes a willful violation subject to statutory damages of $100–$1,000 per applicant. Use a completely separate form every time.

Do I need a new authorization form every time I run a background check on an existing employee?

Generally, yes for a new consumer report. The FCRA requires authorization before each report is obtained. If you have a periodic re-check program, best practice is to obtain a new authorization annually or before each re-screening event. Some employers use a blanket authorization disclosure that covers periodic checks, but this approach carries risk and should be reviewed by legal counsel before use.

What is the minimum waiting period between sending the pre-adverse action notice and the final adverse action?

The FCRA does not specify an exact number of days, but the FTC guidance and most employment attorneys recommend a minimum of 5 business days. The standard is whether the applicant had a "reasonable opportunity" to dispute inaccurate information. Some employers use 7 to 10 business days to reduce litigation risk. Document the dates of both notices in the applicant file.

Does the FCRA apply if I call a former employer directly without using a background check company?

If you gather information yourself through direct reference checks — calling former employers, checking public records personally — FCRA's consumer report requirements technically do not apply because there is no consumer reporting agency involved. However, 49 CFR 391.23 still requires written driver consent before contacting prior motor carrier employers, and EEOC rules on disparate impact apply regardless of how you gather information.

Are there specific FCRA rules for background checks on independent contractor owner-operators?

Yes. The FCRA applies to background checks conducted for employment purposes and, in some circumstances, for contractor relationships. If the background check is used to evaluate whether to engage an owner-operator who is treated as an independent contractor, FCRA requirements likely still apply. Misclassification of drivers as independent contractors is also a separate federal and state compliance risk that affects which HR rules govern your relationship.

What records do I need to keep related to background check disclosures and authorizations?

Keep signed disclosure and authorization forms for every applicant — hired or not — for a minimum of 2 years under FCRA best practices and Equal Employment Opportunity Commission recordkeeping rules (29 CFR Part 1602). For CDL driver files, 49 CFR 391.51 requires driver qualification records to be retained for the duration of employment plus 3 years after termination. Maintain adverse action notice copies for the same period.

Stop Managing Background Check Compliance With Spreadsheets

Every driver you hire without a fully documented, FCRA-compliant disclosure process is a potential plaintiff in a class action lawsuit. HRForge was built specifically for small trucking companies that cannot afford a dedicated HR department but cannot afford a compliance failure either. From auto-generated standalone disclosure forms to adverse action workflow tracking and driver qualification file management, HRForge's trucking HR compliance platform puts your entire pre-employment process on autopilot — with an audit trail that holds up under DOT scrutiny. See how it works for fleets of 5 to 500 trucks.