Employee Background Check Laws in Idaho
Last reviewed: October 2026
Quick Answer
Idaho employers must comply with the federal Fair Credit Reporting Act (FCRA), which requires written consent and disclosure before conducting background checks on job applicants. Employers must provide adverse action notice if they deny employment based on background check results. Idaho has no independent state background check statute, so federal FCRA rules are the primary legal framework. Employers should use third-party consumer reporting agencies that comply with FCRA accuracy and dispute requirements.
Key Facts
- •Idaho employers must comply with federal FCRA requirements and provide written disclosure before conducting background checks.
- •Idaho law allows employers to consider criminal history but requires individualized assessment under fair chance hiring principles.
- •Employers must obtain written consent and provide adverse action notice if denying employment based on background check results.
- •Idaho has no state-specific background check statute; federal FCRA and limited state protections apply to all employers.
Federal Law: The Baseline
The Fair Credit Reporting Act (FCRA), 15 U.S.C. § 1681 et seq., is the primary federal law governing background checks nationwide, including Idaho. The FCRA applies to all employers who use consumer reports (background checks) obtained through third-party consumer reporting agencies. The law requires employers to provide written disclosure and obtain signed authorization before obtaining a background report on a job applicant. Employers must also provide adverse action notice—in writing—before taking an adverse action (such as denying employment) based on information in a consumer report. The notice must include a copy of the report and a summary of rights.
The FCRA prohibits consumer reporting agencies from reporting certain negative information beyond specified time periods. For example, most adverse information must be removed after seven years, and criminal convictions cannot be reported after seven years (with limited exceptions for positions paying over $75,000 per year). The EEOC enforces FCRA rules related to discrimination, and the Federal Trade Commission (FTC) enforces FCRA generally. Employers who violate FCRA requirements face civil liability, including actual damages, statutory damages up to $1,000 per violation, attorney fees, and punitive damages in cases of willful noncompliance.
Under FCRA § 1681b(b)(1), employers must separately disclose and obtain written authorization specifically for background checks, distinct from other authorization forms. The disclosure must inform applicants that a background check may be obtained and that the applicant has the right to dispute inaccuracies.
Idaho Law: What's Different
Idaho does not have a comprehensive state-level background check statute. Idaho employers are governed entirely by the federal Fair Credit Reporting Act (FCRA) and general Idaho employment law principles. This means Idaho employers have fewer legal restrictions on background checks than employers in states with independent background check statutes, but they must still comply with all FCRA requirements.
Idaho Code § 67-5909 and Idaho's Human Rights Act (Idaho Code § 67-5901 et seq.) provide general protections against employment discrimination based on protected classes (race, color, creed, national origin, sex, disability, and age over 40), but these statutes do not establish independent rules for background check procedures. However, Idaho courts would likely apply federal precedent prohibiting employers from using background check information in a manner that has a disparate impact on protected classes without sufficient job-relatedness and business necessity.
Unlike some states (California, New York, Massachusetts), Idaho does not impose a mandatory "ban the box" requirement delaying criminal history inquiries until after conditional offer of employment. Idaho employers may ask about criminal history on job applications and during the hiring process at any stage, provided they comply with FCRA disclosure and consent requirements. Idaho also does not prohibit employers from considering credit reports or other consumer information in hiring decisions, though FCRA requirements still apply if third-party agencies are used.
The key difference from federal baseline is that Idaho provides no additional state-level protections or restrictions beyond the FCRA. This means Idaho employers have broader discretion to use background checks and consider applicant history compared to states with independent statutes. However, Idaho employers must still comply with the FCRA's disclosure, authorization, adverse action notice, and accuracy requirements. If an Idaho employer uses a third-party consumer reporting agency, that agency must comply with FCRA standards for accuracy, dispute resolution, and information retention.
Key Numbers & Thresholds
No employee count threshold—FCRA applies to all Idaho employers. Written disclosure and signed authorization required before background check. Seven-year reporting limit for most negative information. Ten-year reporting limit for criminal convictions in some cases (positions with annual compensation exceeding $75,000). Adverse action notice must be provided before denying employment. No state-specific timeline for notice, but FCRA best practice is without unreasonable delay. No waiting period between disclosure and background check commencement required by Idaho law.
Exceptions & Special Cases
Idaho employers have broad exceptions and defenses under the FCRA framework. First, employers may conduct background checks without FCRA compliance if they do not use a third-party consumer reporting agency—the FCRA applies only when a third party obtains the report on the employer's behalf. If an employer conducts an internal background check (e.g., calling former employers directly), FCRA requirements do not apply, though common law negligent hiring liability may still attach.
Second, certain exemptions apply to specific types of reports and employers. For example, employment records obtained directly from prior employers, educational records, public records (court records, property records), and information provided by the applicant themselves may not constitute "consumer reports" subject to FCRA in all cases, though this is fact-dependent and disputed.
Third, Idaho employers may use background check information to deny employment if it is job-related and consistent with business necessity. The EEOC has issued guidance (EEOC Enforcement Guidance on Arrest and Conviction Records, 2012) requiring individualized assessment of criminal history rather than categorical exclusions, but Idaho does not independently impose this requirement. However, discriminatory application of background check criteria (e.g., applying stricter standards to applicants of one race) violates Idaho's Human Rights Act.
Fourth, positions involving access to children, vulnerable populations, or sensitive government work may have additional exemptions or allowances under background check law, though Idaho does not codify these broadly. Fifth, small employers (under 15 employees) are exempt from title VII of the Civil Rights Act, though they may still face liability under Idaho state law and FCRA. Sixth, employers may exclude applicants for certain convictions (e.g., felonies involving dishonesty for positions requiring trust) without individualized assessment if such exclusion is uniformly applied and not discriminatory.
What to Do If Your Rights Are Violated
Step 1: Document Everything — Maintain records of all background check disclosures, written authorizations, consumer reports received, and any adverse action notices sent. Keep copies of emails, application materials, and communications with third-party consumer reporting agencies. If the applicant disputes information in the background check, document the dispute process and any corrections made. Retain these records for at least three years from the date of the background check or hiring decision, in case the applicant files a charge or lawsuit.
Step 2: Implement Internal Disclosure and Consent Process — Before requesting a background check, provide the applicant with a clear written disclosure stating that a background report may be obtained and that the applicant has the right to dispute inaccuracies. The disclosure must be separate and distinct from other authorization forms. Obtain the applicant's signed written authorization specifically for the background check. Do not proceed with the background check until both disclosure and authorization are complete. Document that the applicant received and understood the disclosure by keeping a copy with the authorization form.
Step 3: File with Consumer Reporting Agency and Meet Deadlines — Select a reputable consumer reporting agency compliant with FCRA standards. Provide the agency with the applicant's information and signed authorization. The agency will obtain the background report, typically within 3-10 business days depending on the scope (criminal history, employment verification, credit report, etc.). There is no Idaho-specific filing deadline; FCRA requires the process to be completed "without unreasonable delay." No state agency filing is required for background checks unless discrimination is suspected (in which case file with the EEOC or Idaho Human Rights Commission).
Step 4: Review Results and Prepare Adverse Action Notice — Once the background report is received, review it carefully for accuracy and job-relevance. If you intend to deny employment based on the report's contents, you must provide the applicant with an adverse action notice before making the final decision. The notice must include: (1) notification that an adverse action will be taken, (2) a copy of the background report, (3) a copy of the applicant's rights summary (provided by the consumer reporting agency), and (4) a statement that the applicant has the right to dispute inaccuracies with the consumer reporting agency within a reasonable time (typically 30-60 days). Provide the adverse action notice in writing and keep a copy for your records. The FCRA does not specify a timeframe for providing notice; follow FCRA best practices by providing notice without unreasonable delay (typically within 5-10 business days).
Step 5: Consult an Employment Attorney — Before denying employment based on a background check, consult an Idaho employment attorney specializing in hiring and discrimination law. An attorney will review whether the denial decision is job-related and non-discriminatory, whether it complies with the FCRA, and whether it violates Idaho's Human Rights Act or any other state/federal law. This is especially important if the applicant belongs to a protected class (race, color, national origin, sex, disability, age over 40) and the background check includes criminal history or other information that could have a disparate impact. An attorney can also advise on reasonable accommodation if the applicant has a disability and the background issue relates to disability-related conduct.
Relevant Agency
Federal Trade Commission (FTC) — Consumer Sentinel & FCRA Enforcement
https://www.ftc.gov/articles/0193-how-recognize-and-report-identity-theft1-877-438-4338
For guidance on Idaho background check compliance and FCRA requirements, consult an Idaho employment attorney or visit the FTC's official FCRA resources.
Get notified when employment law changes
Laws change every year. We'll email you when something changes that affects this topic.
Frequently Asked Questions
Can an Idaho employer ask about criminal history on a job application?
Yes, Idaho has no "ban the box" law. Idaho employers may ask about criminal history at any stage of the hiring process—on the application, in an interview, or after a conditional offer. However, if the employer uses a third-party consumer reporting agency to conduct a background check that includes criminal history, the employer must comply with FCRA disclosure and authorization requirements. The employer must also provide an adverse action notice before denying employment based on criminal history. Additionally, under EEOC guidance (which Idaho courts recognize), employers should conduct an individualized assessment of the applicant's criminal record rather than automatically excluding all applicants with any conviction. Blanket exclusion policies (e.g., no one with a felony conviction) may violate federal law if they have a disparate impact on protected classes, even though Idaho law does not independently require individualized assessment.
What information can an Idaho employer obtain through a background check?
Idaho employers can obtain various types of background information through consumer reporting agencies, including criminal history (arrests, convictions, incarceration), employment verification (dates, job titles, compensation), educational verification, credit reports (if job-related), driving records, civil judgments, bankruptcy records, and reference checks. However, the FCRA limits what can be reported: most negative information expires after seven years (e.g., collections accounts, late payments, civil judgments), criminal convictions generally cannot be reported after seven years (with exceptions for positions paying over $75,000 per year), and bankruptcies cannot be reported after ten years. Additionally, employers cannot use background information in a discriminatory manner. For example, using credit reports to screen out applicants of a particular race, if the practice has a disparate impact, may violate federal law. Idaho employers should ensure that any background check category used (credit, criminal, etc.) is job-related and applied consistently to all applicants.
What must an Idaho employer include in an adverse action notice after a background check?
Under the FCRA, an Idaho employer must provide a written adverse action notice before denying employment based on a background check. The notice must include: (1) a clear statement that an adverse action will be taken (e.g., "We will not be moving forward with your employment application"); (2) a copy of the actual background report received from the consumer reporting agency; (3) a copy of the applicant's rights summary (a standardized document provided by the consumer reporting agency that explains the applicant's right to dispute inaccuracies and obtain a free copy of the report); and (4) optionally, the employer's reason for the denial (not required by FCRA but best practice). The employer must provide this notice in writing (not verbally) and should deliver it in a manner that shows receipt (certified mail, email with read receipt, or hand delivery). The applicant has the right to dispute inaccuracies with the consumer reporting agency within 30-60 days of receiving the notice. Failure to provide a complete adverse action notice violates the FCRA and exposes the employer to FCRA damages.
How long does an Idaho employer have to provide an adverse action notice after receiving a background check?
The FCRA does not specify a hard deadline for providing an adverse action notice. Instead, the law requires notice be provided "without unreasonable delay." In practice, FCRA best practices and FTC guidance suggest providing the notice within 5-10 business days of receiving the background report and deciding to deny employment. Waiting weeks or months to provide notice increases the risk of an FCRA violation claim. Idaho courts would likely apply federal FCRA precedent, which considers delays of more than two weeks suspect. Additionally, delaying notice may harm the applicant's ability to dispute inaccuracies with the consumer reporting agency (applicants typically have 30-60 days to dispute). As a safe practice, Idaho employers should provide adverse action notice within one business week of deciding to deny employment based on the background check. Documentation of when the notice was sent and how it was delivered is critical for defending against FCRA claims.
Can an Idaho employer use a background check to deny employment to someone with a criminal record?
Yes, but with important limitations. Idaho employers may deny employment based on criminal history if the conviction is job-related and poses a legitimate business concern. For example, an employer can deny employment to an applicant with a felony theft conviction for a position handling cash or valuable inventory. However, under EEOC guidance (which Idaho courts respect), the employer must conduct an individualized assessment rather than applying a blanket exclusion policy. This means the employer should consider: (1) the nature and gravity of the offense; (2) the time elapsed since the conviction; (3) the nature of the job; (4) the employer's legitimate business interests; and (5) whether rehabilitation is evidenced. Additionally, if the employer's blanket exclusion policy (e.g., no felonies) has a disparate impact on a protected class (e.g., African American applicants, who statistically have higher conviction rates), the employer must show the policy is job-related and consistent with business necessity. Idaho's Human Rights Act prohibits discrimination based on protected classes, so any criminal history policy must be applied consistently and non-discriminatorily. If the employer denies employment based on criminal history, the FCRA requires an adverse action notice before the denial becomes final.
Related Topics in Idaho
Sources & References
- 15 U.S.C. § 1681 et seq. (Fair Credit Reporting Act) — Federal law governing consumer reports and background checks nationwide
- 15 U.S.C. § 1681b(b)(1) — Requires written disclosure and signed authorization before obtaining background report
- 15 U.S.C. § 1681e(b) — Requires reasonable accuracy and dispute procedures for consumer reporting agencies
- Idaho Code § 67-5909 — Addresses employer liability and employment-related matters under Idaho civil rights law
Informational only. Not legal advice. Laws change — always verify with a licensed attorney.
Editorial standards: This guide is reviewed against primary government sources and cites 4 statutes. Last reviewed October 2026. Scheduled for re-verification by October 2027.
See our editorial policy for how content is created and verified, or report an inaccuracy.