FCRA Compliance for Nonprofits: What You Need to Know About Volunteer Background Checks

If your organization screens tenants, you already know that FCRA compliance is not optional. The Fair Credit Reporting Act governs how consumer reports — including background checks — can be obtained and used. What many nonprofit leaders, HOA board members, and volunteer coordinators don't realize is that FCRA compliance for nonprofits applies with the same legal force when you screen volunteers as when a landlord screens a rental applicant. The rules are nearly identical, the penalties for non-compliance are real, and the organizations caught off-guard are often the ones who assumed the law only applied to employment or housing decisions.

What Is the FCRA and Why Does It Apply to Volunteers?

The Fair Credit Reporting Act (15 U.S.C. § 1681 et seq.) is a federal law enacted in 1970 and substantially amended in 1996 and 2003. Its core purpose is to protect consumers by regulating how consumer reporting agencies (CRAs) collect, share, and use consumer information, and by imposing obligations on the businesses that request and act on that information.

A background check vendor is a CRA. When your nonprofit hires that vendor to pull a criminal history, credit report, or sex offender registry check on a volunteer applicant, your organization becomes a "user" of a consumer report under the FCRA. That triggers a specific set of legal obligations regardless of whether you are a for-profit business, a 501(c)(3), an HOA, a faith community, or a youth sports league.

The law does not carve out nonprofits. The FCRA's definition of "employment purposes" — the permissible purpose that covers most volunteer screening — has been interpreted broadly by the FTC and CFPB to include unpaid positions where the organization exercises control and direction over the volunteer's activities.

The FCRA's Three Core Requirements for Background Check Users

• Disclosure: Before obtaining a consumer report, you must clearly disclose to the individual in writing that you may obtain a consumer report for screening purposes. This disclosure must be in a standalone document — it cannot be buried inside a general volunteer application form.
• Authorization: You must obtain the individual's written authorization before pulling the report. A signature (physical or electronic) on a standalone consent form is the standard method.
• Certification: You must certify to the CRA that you have a permissible purpose, that you have provided the required disclosure, and that you will comply with FCRA requirements including the adverse action process.
• Adverse Action Process: If you decide not to accept a volunteer based on information in the consumer report, you must follow a two-step adverse action notice process before the decision becomes final.

Volunteer Background Check Consent: What the Form Must Include

• A clear statement that the organization may obtain a consumer report in connection with the volunteer application
• The name and contact information of the consumer reporting agency that will conduct the check
• A statement that the report may include criminal history, sex offender registry status, and other public records
• A statement that the individual has the right to request a free copy of their consumer report from the CRA
• A statement that the individual has the right to dispute inaccurate information in their report
• A reference to the Summary of Consumer Rights under the FCRA — this document must be provided to the volunteer at the time of disclosure
• Space for the individual's printed name, signature, and date
• The document must stand alone — it cannot be combined with the volunteer application or any other agreement

State-Level Variations: Why Federal Compliance Is Not Enough

The FCRA establishes a federal floor — a minimum standard that every organization must meet. But many states have enacted their own consumer protection and background check laws that impose stricter requirements.

• California (ICRAA/CCRAA): California's Investigative Consumer Reporting Agencies Act imposes additional disclosure requirements and gives consumers the right to receive a copy of their report directly from the CRA.
• New York: Requires separate disclosure forms and imposes specific timing requirements for background check reports used in employment-equivalent contexts.
• Minnesota: Requires that consumers be notified of the nature and scope of any investigation.
• "Ban the Box" and Fair Chance laws: Many states and municipalities restrict when criminal history information can be requested and how it can be used, even in the volunteer context.

The Adverse Action Process: What Happens When a Background Check Raises Concerns

• Step 1 — Pre-Adverse Action Notice: Before making the final decision, send the individual a written pre-adverse action notice that includes (a) a copy of the consumer report and (b) a copy of the Summary of Your Rights Under the Fair Credit Reporting Act. The purpose is to give the individual an opportunity to review the report and dispute any inaccurate information before you finalize your decision.
• Waiting Period: Providing at least five business days is a reasonable standard that gives the individual a meaningful opportunity to respond.
• Step 2 — Final Adverse Action Notice: If you proceed with the adverse action, send a final adverse action notice that includes: notice that adverse action has been taken; the CRA's contact information; a statement that the CRA did not make the adverse action decision; and notice of the individual's right to a free copy of the report within 60 days.

Skipping the pre-adverse action step is a common and costly error. Class action lawsuits under the FCRA for failure to provide pre-adverse action notices have resulted in settlements ranging from hundreds of thousands to tens of millions of dollars. The law provides statutory damages of $100 to $1,000 per violation even without proof of actual harm.

Common FCRA Compliance Mistakes Nonprofits Make

• Combining the disclosure with the volunteer application: The FCRA requires a standalone disclosure document.
• Using a consumer report without a signed authorization: Verbal consent is not sufficient.
• Skipping the pre-adverse action notice: Many organizations make the rejection decision and communicate it to the individual without first sending the pre-adverse action package.
• Failing to provide the Summary of Consumer Rights: This federally mandated document must accompany both adverse action notices.
• Retaining consumer report data insecurely or indefinitely: Both under-retention and insecure storage create compliance risk.
• Relying on non-FCRA-compliant screening vendors: Always verify that your screening vendor is a legitimate CRA.

Choosing an FCRA-Compliant Volunteer Screening Platform

Purpose-built volunteer screening platforms are designed specifically to guide nonprofits through the full FCRA compliance workflow — from consent collection through adverse action notices — reducing the risk that your organization misses a required step.

The Parallel to Tenant Screening: What Landlords Already Know

If you use VerticalRent for tenant screening, you have already internalized the FCRA's core framework. Every time you pull a credit report or criminal background check on a rental applicant through VerticalRent, the platform walks you through the disclosure, authorization, and adverse action process that the FCRA mandates. The volunteer screening context operates under the same legal architecture. The permissible purpose code differs ("employment purposes" for volunteers vs. "tenant screening" for applicants), but the procedural requirements are functionally identical.

Key Takeaways

FCRA compliance for nonprofits is not optional, discretionary, or limited to large organizations with HR departments. Any nonprofit, HOA, or community organization that uses a consumer reporting agency to screen volunteers is subject to the same legal obligations that govern tenant screening and employment background checks. Treat your volunteer screening program with the same rigor you apply to tenant screening, and you will be well-positioned to protect both your organization and the volunteers who serve it.