Can the HR CRA Letter be signed electronically?

Yes. Electronic signatures meet federal ESIGN requirements when intent, consent, attribution, and reliable record retention are present (15 U.S.C. §7001). Follow any state UETA rules for intrastate transactions.

Must I get a separate disclosure and consent?

Yes. The FCRA requires a standalone disclosure and a separate authorization before obtaining a consumer report; avoid combining with unrelated application language.

Is notarization required for CRA Letters?

No. Notarization is not generally required for employer consumer-report authorizations. Only notarize when a state or specific vendor requirement calls for it.

What if an applicant refuses e-signature?

Provide a reasonable paper alternative. ESIGN requires consent to conduct transactions electronically; document the choice and workflows used.

How do I handle pre-adverse and adverse actions?

Provide the report copy and the FCRA Summary of Rights prior to adverse action, then send a final adverse-action notice if you proceed with the adverse decision.

How long must I keep CRA Letters?

Retain consents and report copies for at least three years post-decision as a baseline; extend retention for HIPAA matters (6 years) or longer per state mandates.

HR CRA Letter

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

HR CRA Letter

Company Name: Candidate Name:

Purpose and Consent

This CRA Letter authorizes the Company named above to obtain consumer reports, investigative consumer reports, criminal history, motor vehicle records, education and employment verifications, and other background information as permitted by applicable law (collectively, "Reports") in connection with the candidate's application, continued employment, or assignment. The candidate understands that the Reports may be obtained from a consumer reporting agency, background screening provider, law enforcement agencies, educational institutions, former employers, and other third parties.

By checking the box below, the candidate provides written authorization for the Company and its authorized agents to obtain such Reports and to use information derived from them in employment-related decisions.

I authorize the Company to obtain consumer and investigative consumer reports about me and to verify any of the information I have provided. I understand that this authorization shall remain in effect during the course of my candidacy and, if applicable, during my employment unless revoked in writing.

Personal Information

Full Legal Name Other Names Used (aliases, maiden) Date of Birth Social Security Number (Last 4 digits) Current Address

Phone

Email

Driver's License or ID Number and State

Position Information

Position Title Department

Reporting Manager

Proposed Start Date

Proposed Salary or Rate

Employment History

Employer 1

Company Name

Title

Start Date

End Date

Primary Responsibilities Reason for Leaving

Employer 2

Company Name

Title

Start Date

End Date

Primary Responsibilities Reason for Leaving

Education

Highest Degree or Certificate Institution Graduation Date Additional Certifications

References

Reference 1

Reference 2

Reference 3

Legal Disclosures

At-Will Employment: If hired, the candidate's employment with the Company is on an at-will basis unless a separate written agreement expressly states otherwise. Either the candidate or the Company may terminate the employment relationship at any time with or without cause or notice.

Equal Opportunity: The Company does not discriminate on the basis of race, color, religion, sex, national origin, age, disability, genetic information, or any other characteristic protected by law. Decisions are based on qualifications and business needs.

Authorization and Release

I authorize the release of Records and Reports to the Company and its authorized agents and release from liability all persons and entities supplying information in good faith. I understand that information obtained may include, but is not limited to, criminal records, education verification, employment verification, motor vehicle records, and credit history where permitted by law. I hereby authorize the Company to use this information for employment-related decisions and to provide adverse action notice if any decision is based in whole or in part on information contained in a consumer report.

I have the right to dispute the accuracy of any Report and to provide additional information for the Company to consider. I understand that any false or misleading statements, omissions, or failure to disclose requested information may be grounds for denial of employment or termination.

Applicant Certification

By signing below, I acknowledge receipt of this authorization, consent to the procurement of Reports, and authorize the Company to contact former employers, educational institutions, references, and other relevant parties. I further acknowledge that I have read and understood the contents of this letter.

Applicant Name:

Signature:

Date:

What an HR CRA Letter Is and when HR teams use it

An HR CRA Letter is a written disclosure and authorization used by employers to request consumer reports from a consumer reporting agency (CRA) for employment screening. It typically combines the FCRA-required disclosure, the applicant's written consent, and clear direction to the CRA about the scope of the report. The document also supports auditability when completed electronically under federal e-signature law such as the ESIGN Act (15 U.S.C. §7001) and applicable state UETA provisions.

Why accurate HR CRA Letters matter for compliance and hiring

A properly prepared HR CRA Letter helps employers meet Fair Credit Reporting Act (FCRA) obligations, documents applicant consent, and reduces legal exposure by preserving audit trails and demonstrable intent under ESIGN (15 U.S.C. §7001) and state UETA rules.

Which roles commonly complete and rely on HR CRA Letters

HR, talent acquisition, and compliance officers typically prepare or approve HR CRA Letters before ordering consumer reports.

HR managers and recruiters who order employment background checks and track candidate consent.
Third-party screening vendors who receive the letter and produce consumer reports for employers.
Legal and compliance teams ensuring FCRA, state privacy, and record-retention obligations are met.

Responsibilities vary by organization size: small employers may centralize preparation in HR, while larger employers often use screening vendors and legal review to standardize letters and workflows.

Essential sections every HR CRA Letter should include

A professional HR CRA Letter groups disclosure, consent, and administrative details to support lawful requests and clear communication with both the applicant and the consumer reporting agency.

Disclosure

A standalone, clear statement that a consumer report may be obtained for employment purposes and that the report may affect hiring decisions; avoid embedding the disclosure within an employment application.

Authorization

A separate signature block for the applicant to provide written authorization for the employer to obtain consumer reports, including dates and scope (credit, criminal, motor vehicle, etc.).

CRA Contact Details

The name, address, and toll-free telephone number of the consumer reporting agency to which the request will be directed, so the applicant can obtain a copy or dispute information.

Report Scope

Explicit description of the types of records requested, the timeframe searched, and any jurisdictions or databases included to limit uncertainty and focus vendor searches.

Pre/Adverse Action Instructions

Procedures for providing a copy of the report and the FCRA Summary of Rights prior to adverse action, and a final adverse-action notice if the employer relies upon the report.

Retention Note

A brief note on how long copies will be retained and where, to support auditability and legal hold obligations if disputes arise.

Security and compliance elements to include

Encryption: AES-256 at rest; TLS 1.2/1.3 in transit

Audit Trail: IP, timestamp, and action history

Access Controls: Role-based access and activity logs

HIPAA Consideration: BAA required when PHI present

Record Integrity: Tamper-evident storage and versioning

Authentication: Email, SMS code, or stronger options

How to complete an HR CRA Letter step by step

Follow a consistent sequence to ensure the letter is legally sound and operationally usable by HR and screening vendors.

01

Prepare disclosure: Insert clear FCRA disclosure language and identify report types requested.
02

Collect applicant data: Capture full legal name, DOB, and SSN (or last four) for accurate matching.
03

Obtain signed consent: Have applicant sign and date authorization before ordering any report.
04

Order report: Send the authorized request to the designated CRA and retain confirmation.

From letter completion to report receipt: the typical flow

A clear routing sequence minimizes delays and preserves evidence of consent and timing for compliance.

Issue letter: HR issues the disclosure and obtains applicant signature or recorded electronic consent.
Submit to CRA: Send the request and required identity data to the named consumer reporting agency.
Receive report: CRA returns the consumer report to HR; record delivery confirmation.
Take action: Provide pre-adverse materials if considering adverse action; follow with final notice as required.

Typical e-submission settings for HR CRA Letters

Configure your digital workflow so disclosure, consent, and audit data are captured consistently and stored securely.

Field	Configuration
Disclosure block	Separate field; must be read-and-acknowledged
Authentication	Email with optional SMS code
Signature field	Require signature and date fields
Audit settings	Capture IP, timestamp, and user agent

Technical capabilities to support electronic HR CRA Letters

Electronic processing requires e-signature support, secure storage, and vendor integrations to automate ordering and retention.

Integrations: Salesforce, NetSuite, Microsoft 365 and Google Workspace integrations
Document formats: PDF and DOCX support; maintain original file fidelity
Audit & logs: Persistent audit trail with tamper-evident attributes

Ensure the selected platform supports the authentication level and record retention your compliance team requires, and document vendor responsibilities in contracts.

Timing considerations and required steps under employment screening laws

Follow timing rules that protect applicant rights and satisfy FCRA procedural steps for pre-adverse and adverse actions.

Pre-report disclosure:

Provide a clear disclosure and obtain written consent before ordering the consumer report.

Pre-adverse action:

If relying on a report, supply the report copy and Summary of Rights before taking adverse action.

Final adverse action:

Send a written adverse-action notice promptly after the hiring decision is made.

Record retention:

Retain consent and copies of reports per retention policies and regulatory obligations.

State timing rules:

Some states impose additional timing or disclosure requirements; verify locally.

Common mistakes to avoid when preparing HR CRA Letters

Combining the FCRA disclosure with application fine print, which may invalidate the standalone disclosure requirement and cause compliance gaps.
Collecting and using incorrect applicant identifiers (e.g., wrong SSN or name variant), leading to mismatched reports and potential adverse-action errors.
Failing to provide a copy of the report and the consumer’s Summary of Rights before adverse action, increasing litigation risk under FCRA.
Not preserving a verifiable audit trail (timestamps, IP address, consent evidence), which undermines proof of compliance if challenged.

Potential legal and business risks from deficient HR CRA Letters

FCRA liability: Civil damages under FCRA

Regulatory fines: State enforcement and penalties

Class actions: Increased exposure in mass claims

Reputational harm: Candidate trust and public scrutiny

Operational delays: Hiring slowdowns from rework

Data breach risk: Sensitive data mishandling consequences

Real-world examples showing how organizations use e-signed screening letters

These customer snapshots illustrate how digital signing and integrations streamline background screening processes in different organizations.

Optica Ventures

Optica simplified candidate paperwork and onboarding with digital forms.

The interface reduced signer confusion during screening.
"The interface is simple and easy-to-use for our team; more importantly, it is just as easy for our customers."

Martin Properties

A small property firm digitized consent and vendor routing for criminal and credit checks.

Faster turnaround enabled quicker hiring decisions.
"I can process and execute all of these documents online with 100% compliance and built-in security."

Frequently asked questions about HR CRA Letters and electronic execution

Answers to common operational and legal questions about drafting, e-signing, and maintaining HR CRA Letters in the U.S.

Need help? Contact support

Can the HR CRA Letter be signed electronically?
Yes. Electronic signatures meet federal ESIGN requirements when intent, consent, attribution, and reliable record retention are present (15 U.S.C. §7001). Follow any state UETA rules for intrastate transactions.
Must I get a separate disclosure and consent?
Yes. The FCRA requires a standalone disclosure and a separate authorization before obtaining a consumer report; avoid combining with unrelated application language.
Is notarization required for CRA Letters?
No. Notarization is not generally required for employer consumer-report authorizations. Only notarize when a state or specific vendor requirement calls for it.
What if an applicant refuses e-signature?
Provide a reasonable paper alternative. ESIGN requires consent to conduct transactions electronically; document the choice and workflows used.
How do I handle pre-adverse and adverse actions?
Provide the report copy and the FCRA Summary of Rights prior to adverse action, then send a final adverse-action notice if you proceed with the adverse decision.
How long must I keep CRA Letters?
Retain consents and report copies for at least three years post-decision as a baseline; extend retention for HIPAA matters (6 years) or longer per state mandates.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now