Investigative consumer reports go further than credit reports by supplying information about the character, general reputation, personal characteristics and mode of living of the subject of the report. This information is obtained through a more intensive investigation, which can include personal interviews with neighbors, friends, business associates, etc. The FCRA provides special rights regarding these reports, as does California law. This website provides the rules and forms that satisfy the requirements of both federal and state law. Failure to comply with these rules can result in significant penalties and costs.1
The investigative report must include the investigative consumer reporting agency’s Internet address. If the agency does not have an Internet address, the report must include the agency’s telephone number. These requirements allow the person to find information on the investigative reporting agency’s privacy practice, including if the person’s personal information will be sent outside the United States or its territories.2
If you intend to obtain an investigative consumer report, both California and federal law require that you:
Make certain that your disclosure and authorization meet these legal requirements. Recent cases have strictly interpreted these requirements to prohibit employers from including anything extraneous in a disclosure:
However, the U.S. Ninth Circuit Court of Appeals clarified that an employer doesn’t violate the FCRA by providing the disclosure document at the same time as other hiring-related materials, as long as the disclosure itself is “standalone.”6
Under California law, the disclosure must inform the person:
The disclosure must also state that, under section 1786.22 of the California Civil Code, the person can view, during normal business hours, the file maintained by the consumer reporting agency. They can also obtain a copy of this file upon submitting proper identification and paying the costs of duplication services, by mail or by appearing at the consumer reporting agency in person. They can also receive a summary of the file by telephone. The agency must have personnel available to explain the file. The agency must explain any coded information appearing in the file. If the individual appears in person, another person of their choice can come along, if this person furnishes proper identification.
As a best practice, you should provide the FCRA - Summary of Your Rights at the same time you make the disclosure of your intent to obtain a report.
You must obtain the person’s written authorization to obtain the report.8 The authorization must provide, by means of a check box, a way for the person to request a copy of any report that is prepared. If the person wants to receive a copy of the report, you must send the copy within three business days of receipt. To send a copy to the person, you can contract with any other entity, such as the consumer reporting agency. The notice to request the report can be contained on either the disclosure form or a separate consent form. The copy of the report furnished to the person must contain the name, address and telephone number of the party that issued the report, and how to contact that party.9
You are required to certify to the consumer reporting agency that you have made the applicable disclosures to the subject of the report. These disclosures include accepting the obligation to provide the person with a copy of the report in a timely manner if requested. You must also provide the person with the consumer reporting agency’s name and address, if adverse action is taken.10
Before taking adverse action based on an investigative consumer report, provide the person with a copy of the Pre-Adverse Action Disclosure, and include a copy of the consumer report that you relied on. This gives the person an opportunity to explain any negative information. Also provide a copy of the FCRA notice, a Summary of Your Rights Under the Fair Credit Reporting Act.
A common question is how long an employer should wait to allow the person to explain any negative information before making a final decision. The FCRA does not specifically address the length of time, but a reasonable amount of time should be allowed. In one Congressional analysis, a five business day period was recommended and that is a standard which is often used by employers.11
If you deny employment after obtaining an investigative consumer report, before taking the action, advise the person facing the adverse action. Use the Adverse Action Notice. Inform the applicant/employee:
You can procure or order an investigative consumer report for the purposes of employment if you suspect wrongdoing or misconduct by the subject of the report. In this case, these rules do not apply.13
The FCRA prohibits consumer reporting agencies from providing consumer reports that contain medical information for employment purposes or in conjunction with credit or insurance transactions, without the specific prior consent of the subject of the report. In the case of medical information being sought for employment purposes, the individual must explicitly consent to the release of the information in addition to generally authorizing a consumer report.
Comply with all legal recordkeeping guidelines regarding retention of any background report information. When you dispose of background reports (and information gathered from them), the FCRA requires that you do so “securely,” which can include burning, pulverizing or shredding paper documents and permanently removing electronic information from your computer systems so that the information can’t be read or reconstructed.
1. Civ. Code sec. 1786.50
2. Civ. Code sec. 1786.16(2)(B)(vi)
3. 15 U.S.C. sec. 1681b(b)(2)(A)
4. Syed v. M-I, LLC, 853 F.3d 492 (2017)
5. Gilberg v. California Check Cashing Stores, LLC, 913 F.3d 1169 (9th. Cir. 2019)
6. Luna v. Hansen & Adkins Auto Transport, Inc., 956 F.3d 1151 (2020)
7. Civ. Code sec. 1786.16 (a)(2)(B)
8. Civ. Code sec. 1786.16 (a)(2)(C)
9. Civ. Code sec. 1786.16(b)
10. Civ. Code sec. 1786.16(a)(4)
11. H.R. Representatives No. 103-486, 1994
12. 15 U.S.C 1681m(a)
13. Civ. Code sec. 1786.16(c)
14. Parsonage v. Wal-Mart Associates, Inc., 118 Cal.App.5th 399 (2026)