Employee Background Check Laws in Georgia
Last reviewed: June 2026
Quick Answer
Georgia employers must comply with the Fair Credit Reporting Act (FCRA), 15 U.S.C. § 1681, which requires written consent before conducting background checks and written disclosure if adverse action is taken. Georgia has no separate state background check law that goes beyond FCRA requirements, meaning FCRA compliance is the baseline for all Georgia employers regardless of size. Employers must provide applicants with a copy of the background report and a clear written notice of their right to dispute inaccuracies before denying employment based on the report.
Key Facts
- •Georgia employers must comply with the Fair Credit Reporting Act (FCRA), 15 U.S.C.
- •§ 1681, which requires written consent before conducting background checks and written disclosure if adverse action is taken.
- •Written consent requirement: Must be obtained before any background check is conducted under FCRA.
Federal Law: The Baseline
The Fair Credit Reporting Act (FCRA), 15 U.S.C. § 1681 et seq., is the primary federal law governing background checks for employment purposes. The FCRA applies to all employers in all states, including Georgia, regardless of company size. Under the FCRA, employers must: (1) obtain clear, conspicuous written authorization from the applicant before obtaining a background report, (2) provide written notice if adverse employment action will be taken based wholly or partly on the report, (3) provide a copy of the report and a summary of FCRA rights before taking adverse action, and (4) allow the applicant a reasonable opportunity to dispute the accuracy of the report with the background check company. The FCRA also imposes strict accuracy requirements on consumer reporting agencies. Employers are prohibited from relying on certain consumer report information, including bankruptcy older than 10 years, most lawsuits and judgments older than 7 years, tax liens older than 7 years, arrest records not resulting in conviction, and criminal convictions older than 7 years in many circumstances. The Federal Trade Commission (FTC) enforces the FCRA, though applicants may also file private lawsuits. Damages can include actual damages, statutory damages up to $1,000 per violation, attorney fees, and punitive damages for willful violations.
Georgia Law: What's Different
Georgia has not enacted a comprehensive state background check law that sets requirements beyond the FCRA. This means Georgia employers must follow federal FCRA requirements as the baseline protection, but Georgia does not provide additional state-level safeguards, restrictions, or employee protections regarding background checks. Georgia Code § 34-1-2 addresses background checks only in the context of criminal justice employment, requiring agencies to conduct thorough background investigations for law enforcement positions, but this is not a general employment protection statute.
Because Georgia lacks its own background check statute, all Georgia employers—small and large—are governed exclusively by the FCRA. This makes Georgia a relatively employer-friendly state on this issue compared to states like California, which ban consideration of criminal convictions older than seven years in most cases, or New York, which restricts how far back employers can look at criminal history. Georgia employers may legally consider convictions older than seven years and may use third-party screening companies without the heightened restrictions some states impose.
Georgia does recognize common law tort claims for invasion of privacy and defamation, which an applicant might assert if a background check company or employer discloses false or private information improperly. However, these claims are narrow and difficult to prove. An applicant can sue under FCRA federal law directly in Georgia courts, and that federal remedy is the primary recourse available to job applicants in the state. Georgia employers are not required to meet any additional notice, timing, or consent requirements beyond what the FCRA mandates.
Key Numbers & Thresholds
Written consent requirement: Must be obtained before any background check is conducted under FCRA. Adverse action notice: Must be provided in writing before or with the background report; no specific deadline stated in FCRA but notice must come before final adverse employment decision. Dispute period: Applicant has no specified statutory deadline under FCRA to dispute, but must be given reasonable opportunity to do so. Consumer reporting agency investigation response: Agencies typically have 30 days to investigate disputes. FCRA lawsuit statute of limitations: 2 years from discovery of the FCRA violation, or 3 years from the date the violation occurred, whichever is earlier. Georgia has no separate state statutory deadline for background check-related claims.
Exceptions & Special Cases
Georgia employers have significant latitude in conducting background checks compared to many states, as long as FCRA procedural requirements are met. The FCRA itself contains important exceptions to the types of information that can be considered. First, employers may not rely on arrest records that did not result in a conviction (with narrow exceptions for convictions within the past 7 years). Second, most civil lawsuits, judgments, tax liens, and arrest records older than 7 years cannot legally be reported or used, though this seven-year rule has exceptions for positions paying over $75,000 annually and certain other roles. Third, bankruptcy information older than 10 years cannot be used.
Georgia employers are not required to conduct 'ban the box' interviews (delaying criminal history questions until after a conditional offer) because Georgia has not adopted ban-the-box legislation. This means an employer may ask about criminal convictions on the initial application or during interviews, unlike in states that restrict such early inquiries.
One important exception: if an applicant signs a valid authorization form meeting FCRA standards, but the employer fails to notify the applicant of adverse action before rejecting the applicant, the employer has not satisfied FCRA requirements and may face liability. Additionally, if a consumer reporting agency (background check company) reports inaccurate information and fails to correct it after notice, the agency—not necessarily the employer—bears liability, though the employer may face liability for the hiring decision made based on false information.
Private companies and nonprofits are covered by the FCRA, but small employers with minimal hiring do not escape FCRA obligations. Educational institutions and government agencies have specific rules under the FCRA and state law that may differ from private employers.
What to Do If Your Rights Are Violated
Step 1: Document Everything. If you are a job applicant who suspects an FCRA violation, immediately retain copies of: (a) any written consent form or authorization you signed before the background check; (b) the background report itself if you received a copy; (c) the written adverse action notice provided by the employer stating what triggered the denial; (d) any written dispute you submitted to the background check company, along with documentation proving you submitted it (email receipt, certified mail confirmation); (e) all communications from the employer or background agency regarding the background check; (f) your own records proving your background information is accurate (court records showing a case was dismissed, certificates showing completion of programs, evidence of name corrections, etc.). Keep these organized and intact, as they form the evidence of what went wrong.
Step 2: Contact the Background Check Company (Consumer Reporting Agency). Before filing a lawsuit, you have a right to dispute inaccurate information with the company that prepared the report. Send a written dispute letter to the background check company's dispute department (address is usually on the background report itself or on their website). Describe exactly what information is inaccurate, provide your evidence, and request an investigation. Send this by certified mail with return receipt to create a paper trail. The agency must investigate within 30 days and respond to you in writing with results. If they fail to do so, or if they confirm the inaccurate information without correcting it, document this non-response as evidence of an FCRA violation. Keep the certified mail receipt.
Step 3: File a Complaint with the Federal Trade Commission and Consider Legal Action. Visit the FTC's online complaint portal at reportfraud.ftc.gov, or mail a written complaint to Federal Trade Commission, Consumer Sentinel Network, 600 Pennsylvania Avenue NW, Washington, DC 20580. Include your case details, copies of the background report, the employer's adverse action notice, and evidence of the inaccuracy. The FTC uses these complaints to identify patterns of violations by background check companies. Simultaneously, file a complaint with the CFPB (Consumer Financial Protection Bureau) at consumerfinance.gov if the background check company also functions as a financial services provider. These agency complaints do not directly remedy your individual situation but create a record and may trigger investigation of the company.
Step 4: Consult an FCRA Employment Attorney in Georgia. Schedule a consultation with an attorney licensed in Georgia who specializes in FCRA cases or employment law. Bring all documentation from Steps 1-3. Most FCRA attorneys work on contingency, meaning you pay nothing upfront. During the consultation, the attorney will evaluate whether you have a strong claim. An FCRA violation can result in statutory damages of $100 to $1,000 per violation (each background check report or adverse action notice can be a separate violation), actual damages (any monetary harm), attorney fees, and punitive damages if the violation was willful (reckless disregard of FCRA requirements).
Step 5: File a Lawsuit if Necessary. If the background check company or employer does not cure the violation and you wish to pursue recovery, your attorney will file a civil lawsuit in Georgia state court or federal court in Georgia. The statute of limitations is 2 years from discovery of the violation or 3 years from the date of the violation, whichever comes first. During litigation, your attorney will conduct discovery (obtaining the employer's and background agency's internal documents and communications), take depositions, and work toward settlement or trial. Many FCRA cases settle because the threat of statutory and punitive damages is significant.
Relevant Agency
Federal Trade Commission (FTC) — Consumer Sentinel Network
https://reportfraud.ftc.gov1-877-438-4338
For guidance on resolving background check disputes or pursuing an FCRA claim in Georgia, consider consulting an employment law attorney who can evaluate your specific situation.
Get notified when employment law changes
Laws change every year. We'll email you when something changes that affects this topic.
Frequently Asked Questions
Can a Georgia employer ask about my criminal record on the job application if there is no ban-the-box law?
Yes. Georgia has not enacted a ban-the-box law, which means employers can ask about criminal convictions on the initial application or during the interview, even before extending a conditional offer. However, the employer cannot consider convictions under the FCRA's seven-year rule or consider arrests that did not result in conviction. The employer must still comply with FCRA procedures (written consent, adverse action notice) before making a hiring decision based on criminal history. Some specific industries, like education, healthcare, and childcare, may have additional restrictions under federal law (such as requirements to disqualify certain convictions) regardless of Georgia's lack of a ban-the-box law.
What should I do if a background check report contains false information about a criminal conviction that was expunged or dismissed?
First, obtain a copy of your expungement order or dismissal from the court where the case was dismissed or expunged. This is your evidence. Send a certified letter to the background check company's dispute department with a copy of the court order, explaining that the conviction should not appear on your report because it was expunged/dismissed. The company must investigate within 30 days. If they do not remove the false information, they have committed an FCRA violation. Document the company's failure to respond or correct. Then consult a Georgia employment law attorney. You may have a claim for statutory damages ($100-$1,000 per violation), actual damages, and attorney fees. The company is required by the FCRA to report only accurate information, and reporting an expunged conviction is a per se violation in many jurisdictions.
If I sign a consent form for a background check, can an employer use the report to deny me a job without telling me first?
No. Even with your written consent, the FCRA requires the employer to provide you with written notice before or immediately upon taking adverse action (denying employment). The notice must include a copy of the background report itself and a summary of your FCRA rights, including your right to dispute inaccuracies with the background check company. If an employer rejects you based on a background report but does not provide this notice and report, the employer has violated the FCRA. You can sue for statutory damages of $100 to $1,000 per violation, plus actual damages and attorney fees. Many Georgia employers fail to provide proper adverse action notices, making this a common violation.
How long can a Georgia employer use old criminal convictions against me in a hiring decision?
Generally, under the FCRA, criminal convictions older than 7 years cannot be reported or used in hiring decisions, with an important exception: if the position pays more than $75,000 annually, there is no seven-year limit. Additionally, convictions for crimes of dishonesty or false statement (such as fraud or embezzlement) may have different treatment. Georgia has not set a shorter lookback period than the FCRA, so the federal seven-year rule (with the $75,000+ exception) applies. If an employer denies you a job and the background report includes a conviction older than 7 years that you did not earn more than $75,000 for, and the employer considered that old conviction, this is an FCRA violation. Consult an attorney if this occurs.
Do small Georgia businesses with only a few employees have to follow FCRA rules for background checks?
Yes, absolutely. The FCRA applies to all employers regardless of size—there is no small-business exemption. A one-person company that conducts a background check on a job applicant must obtain written consent, provide adverse action notices, and comply with all other FCRA requirements. Georgia employers cannot skip FCRA compliance because they are small. The only exception is if the background check is conducted in-house by the employer's own employees without using a third-party consumer reporting agency; however, once a third party (such as a background check company, detective agency, or vendor) is involved, the FCRA applies fully. Many small businesses make the mistake of thinking FCRA rules only apply to large corporations, leading to violations and lawsuits.
Related Topics in Georgia
See background check laws laws in every state →Sources & References
- U.S.C. § 1681
- or employee protections regarding background checks. Georgia Code § 34-1-2
Informational only. Not legal advice. Laws change — always verify with a licensed attorney.
Editorial standards: This guide is reviewed against primary government sources and cites 2 statutes. Last reviewed June 2026. Scheduled for re-verification by June 2027.
See our editorial policy for how content is created and verified, or report an inaccuracy.