Employee Background Check Laws in Ohio

The Fair Credit Reporting Act (FCRA), codified at 15 U.S.C. § 1681 et seq., is the primary federal law regulating background checks for employment purposes. Under the FCRA, employers and third-party background check companies (called consumer reporting agencies) must follow strict procedures when gathering and using background information about job applicants.

The FCRA applies to all employers in all states, including Ohio. Before an employer may obtain a background check on an applicant, the employer must provide clear written notice of its intent to conduct the check and must obtain the applicant's written authorization. This notice and consent must be provided in a document separate from any other materials (or, if combined, the notice must be clear and conspicuous).

Consumer reporting agencies must follow reasonable procedures to ensure maximum possible accuracy of the information they provide. If an applicant disputes information on their background report, the agency must investigate the dispute within 30 days and correct any errors. Applicants have the right to receive a free copy of their consumer report once per year.

If an employer decides to take adverse action (such as rejecting an applicant) based on information in a background check report, the employer must provide the applicant with an adverse action notice, including a copy of the report and the applicant's rights under the FCRA. The applicant then has the right to dispute any inaccurate information with the reporting agency.

The Federal Trade Commission (FTC) and the Consumer Financial Protection Bureau (CFPB) enforce the FCRA. Applicants may also sue employers or reporting agencies directly for violations.

Ohio does not have its own state-specific background check statute or comprehensive background check law. This means the Fair Credit Reporting Act (FCRA) is the sole governing statute for background checks in Ohio, and no additional state-level protections apply. Unlike some states (such as California or Connecticut), Ohio has not enacted a ban-the-box law that would prohibit or delay inquiries into criminal history on job applications.

Because Ohio lacks a separate state law on background checks, employers in Ohio are subject only to the federal FCRA requirements. This places Ohio employers and applicants in a baseline position without enhanced state-level protections. Applicants in Ohio cannot rely on any Ohio state statute to supplement FCRA rights; they are limited to federal remedies and the procedures outlined in the FCRA itself.

Ohio employers may ask about criminal convictions or arrests on initial job applications without restriction, because there is no state ban-the-box law. Some Ohio localities (such as the City of Columbus) have enacted their own ordinances restricting when employers may ask about criminal history, but these are limited to jobs with that municipality and do not apply statewide. If an applicant applies for a job with the City of Columbus, that employer must comply with Columbus's ban-the-box ordinance in addition to the FCRA.

The absence of state-specific protections means Ohio applicants have no additional state remedies or damages available beyond what the FCRA provides. Applicants must file complaints with the FTC or pursue private lawsuits under the FCRA. Ohio does not maintain a state consumer protection agency with independent jurisdiction over background check practices.

The FCRA contains several exceptions and carve-outs that may limit an applicant's protections. First, the FCRA does not apply to background checks conducted by the applicant's current or former employer about their own employees or applicants for employment at that company, if the employer uses the information solely for its own personnel or human resources purposes. Second, if an applicant has signed a clear, written authorization specifically permitting a background check, the FCRA's notice requirement is deemed satisfied.

Third, background checks conducted by the applicant's state or local government for employment purposes may be subject to different rules under state and local law. Additionally, certain positions are exempt from standard FCRA procedures: background checks for positions in certain financial institutions, casinos, and law enforcement agencies may follow separate statutory schemes.

Fourth, Ohio employers are not required to hire someone with a criminal record. While the FCRA requires accurate reporting, employers may legally reject applicants based on accurate criminal history if the conviction is substantially related to the job duties or if the employer has a legitimate business interest in the conviction. However, employers must apply this standard consistently and may not use it as a pretext for discrimination based on protected characteristics (race, color, religion, sex, national origin, age, or disability).

Fifth, the FCRA's adverse action notice requirement does not require an employer to afford the applicant an opportunity to respond or to reconsider the rejection. The applicant's remedy is to dispute the information with the reporting agency or to sue for FCRA violations. Sixth, background checks for independent contractors are not covered by the FCRA if the contractor is not an 'employee' under the statute; however, most employment background checks are covered.

Step 1: Document Everything. Keep copies of all communications with the employer regarding the job application, including job postings, application forms, emails, and any notices received from the employer. If you received a notice about a background check, save that document. If you have already obtained your own copy of your background report (available free once per year through AnnualCreditReport.com or directly from the reporting agency), keep that as well. Maintain a timeline of when you applied, when the background check was conducted (if you know), and when you were notified of rejection. Take screenshots of website pages and save all email correspondence.

Step 2: File an Internal Dispute if Applicable. If you were rejected based on background check results and you believe the information is inaccurate, first contact the consumer reporting agency (the company that conducted the background check, which should be named in the adverse action notice you received from the employer). File a written dispute with the reporting agency within 30 days of receiving the adverse action notice to maximize your rights under the FCRA. Send your dispute by certified mail to the address provided in the adverse action notice. The reporting agency must investigate and respond to your dispute within 30 days. If the agency corrects any errors, ask them to send the corrected report to the employer and anyone else who received the original inaccurate report in the past six months.

Step 3: File a Complaint with the Federal Trade Commission (FTC). If the employer violated the FCRA by conducting a background check without your written consent, failing to provide an adverse action notice, or using a background check for a purpose other than employment, file a complaint with the FTC at reportidentitytheft.ftc.gov or by calling 1-877-438-4338. You may also file a complaint with the Consumer Financial Protection Bureau (CFPB) at consumerfinance.gov/complaint. Provide the employer's name, the date of the background check, the name of the reporting agency (if known), and a detailed description of the violation. Include copies of all relevant documents. The FTC and CFPB will review your complaint and may investigate if a pattern of violations is detected, but they do not provide individual compensation.

Step 4: Understand the Investigation Process. The FTC and CFPB do not guarantee individual settlements; instead, they monitor for widespread violations and may pursue enforcement actions against companies. If you file a complaint, you may receive a response acknowledging receipt, but you will likely not receive a detailed investigation update. The process typically takes several months to over a year. The FCRA allows the FTC to seek civil penalties and injunctions against companies that violate the law. If the FTC finds a violation, it may pursue a settlement that includes changes to company practices and sometimes restitution to affected consumers, but individual applicants do not automatically recover damages through the FTC process.

Step 5: Consult an Attorney and Consider a Private Lawsuit. If you suffered financial or emotional harm due to a background check violation, consult an employment law attorney licensed in Ohio. Many FCRA violations entitle applicants to private lawsuits for actual damages (such as lost wages if you were wrongfully rejected for a job), statutory damages (up to $1,000 per violation under the FCRA), and attorney's fees. An attorney can evaluate whether you have a strong claim, whether to pursue a demand letter to the employer, and whether to file a civil lawsuit in federal court or Ohio state court. The FCRA statute of limitations is not clearly specified, but courts typically apply the four-year limit for general civil suits. An attorney can also advise on whether the employer's violation was willful (which increases damages) or negligent (which may result in lower damages). Many attorneys offer free initial consultations and may work on a contingency fee basis (where they take a percentage of any settlement or judgment).