Background Check Consent Form
What the Background Check Consent Form Is
Why a Clear Consent Form Matters
A Background Check Consent Form ensures informed consent, documents the scope of permitted searches, and reduces legal risk by creating a written record for FCRA and state notice requirements. It standardizes screening across candidates and supports defensible hiring decisions.
Who Typically Completes This Form
Typical users and roles that complete a Background Check Consent Form include HR staff, hiring managers, background screening vendors, and security or compliance teams.
- Human resources teams handling hiring, onboarding, and policy compliance across organizations.
- Hiring managers requesting candidate reports to assess qualifications and suitability for roles.
- Background screening firms and consumer-reporting agencies that supply criminal or credit checks.
Smaller employers, volunteers, landlords, and contractors also use the form when authorizing background screenings for non‑employee relationships.
Step-by-Step: Complete the Form Accurately
-
01Confirm Identity: Provide full legal name and government ID details.
-
02Scope of Search: Select which checks (criminal, credit, employment) are authorized.
-
03Consent Disclosure: Read and acknowledge state and FCRA disclosures before signing.
-
04Sign and Date: Sign with handwritten or e-signature and insert the execution date.
Common Questions About Background Check Consent
-
Can the form be signed electronically?
Yes. Electronic signatures are enforceable under the ESIGN Act (15 U.S.C. §7001) and by UETA where adopted, provided the signer demonstrates intent, consents to electronic records, attribution is established, and records are retained in a reproducible form. Some exceptions may apply per state law.
-
What disclosures does FCRA require?
Under the Fair Credit Reporting Act, employers must provide a clear disclosure in a standalone document before obtaining a consumer report and obtain written authorization. If adverse action follows, a pre-adverse and adverse action notice with a copy of the report and FCRA summary are required.
-
How should SSNs be collected and protected?
Collect Social Security numbers only when necessary and limit access. Use encrypted transmission and storage (TLS, AES-256), restrict viewing to authorized staff, and include retention limits in privacy policies. Comply with state breach notification and data protection laws when handling SSNs.
-
What if an applicant refuses to provide consent?
Refusal to consent typically prevents the employer from obtaining consumer reports. Employers should document refusal, consider alternative screening allowed by law, and avoid adverse employment action based solely on lack of a background check unless a lawful, role-related reason exists and is consistently applied.
-
Do state-specific notice requirements apply?
Yes. Several states require additional disclosures, stand-alone forms, or model language when obtaining consumer reports. Check state attorney general or labor agency guidance for mandatory notice text and timing to ensure compliance with both federal FCRA obligations and state consumer protection laws.
-
What retention period applies to consent forms?
Retention depends on applicable law and business needs; keep records of consent and disclosures for at least the period required by FCRA-related documentation and any applicable state laws. For HIPAA-covered entities, follow 45 CFR §164.530(j) six‑year retention rules for protected health information records.
Key Risks and Potential Consequences
Common Preparation Mistakes to Avoid
- Using a combined disclosure and consent where law requires a standalone FCRA disclosure can invalidate the consent and lead to compliance gaps.
- Collecting partial or mismatched identity data — for example, nicknames or incomplete SSNs — increases false negatives or mismatches during vendor searches.
- Failing to provide clear pre-adverse and adverse action notices after receiving a report risks FCRA violations and possible litigation.
- Relying on generic consent forms without state-specific language can overlook mandatory notices and trigger state-level penalties or remediation demands.
How Electronic Submission Typically Works
-
Upload Document: Attach the consent form PDF or create from template.
-
Add Fields: Place name, DOB, SSN, checkboxes, and signature fields.
-
Set Authentication: Choose email, SMS code, or KBA per risk level.
-
Send & Track: Distribute link or invite; capture audit trail and receipt.
Configure an Online Consent Workflow
| Field | Configuration |
|---|---|
| Identity field | Require full name, DOB, SSN encryption |
| Consent checkbox | Require checkbox with standalone disclosure |
| Authentication | Email link default; SMS or KBA optional |
| Retention rule | Auto-archive after required retention period |
Platform Capabilities to Check
Electronic execution requires compatible file formats, signer authentication options, and secure storage that meet legal and organizational policies.
- File Types: PDF, DOCX accepted
- Integrations: Connects to HRIS and ATS
- Authentication: Email, SMS, KBA options
Timing and Notice Deadlines to Track
Provide Disclosure:
Before obtaining report, supply standalone FCRA disclosure
Obtain Consent:
Secure written or electronic authorization prior to search
Pre-Adverse Notice:
Send notice and copy of report before action
Adverse Action Notice:
Provide final notice, reason, and rights under FCRA
Retention Requirement:
Retain consent and audit records per regulations and policy
Practical Examples of Use
Property Management
A regional property management company moved tenant screening online to reduce move-in delays and streamline applications across offices.
- Result: faster approvals and fewer errors.
- By combining a clear consent form with electronic signature and automated distribution, the team reduced processing time, decreased missing data incidents, and documented compliance with state disclosure requirements for each applicant.
Healthcare Clinic
A multi‑location clinic required HIPAA-compliant screening of volunteers and contract staff while maintaining patient data protections across systems.
- Implemented secure, auditable e-sign workflows.
- The clinic used a platform with BAA options and encrypted storage, retained signed consents per HIPAA guidance, and limited SSN visibility to authorized personnel to reduce breach risk and support regulatory audits.
Best Practices for Accurate and Compliant Forms
Key Milestones From Disclosure to Retention
Disclosure Provided
Deliver required FCRA and state disclosures before ordering reports.
Consent Obtained
Obtain signed consent prior to running searches.
Report Received
Review screening vendor report and verify identity match.
Adverse Action
Issue pre-adverse, allow response, then send final notice if needed.
eSignature Pricing and Feature Comparison
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial (no card) | Varies by vendor | Varies by vendor | Varies by vendor | Varies by vendor |
| Bulk Send | Yes | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |
| Envelope Cap | No envelope cap | 100 envelopes/user/year | Varies by plan | Varies by plan | Varies by plan |