Skip to main content

Employee Background Check Laws in Virginia

Last reviewed: July 2026

Quick Answer

Virginia employers must obtain written consent from applicants before conducting background checks under the federal Fair Credit Reporting Act (FCRA), 15 U.S.C. § 1681 et seq. The state does not have its own comprehensive background check statute, but Virginia Code § 40.1-49.2 prohibits employers from discriminating based on criminal history unless the offense is directly related to the job. All adverse employment decisions based on background check findings must include notice and an opportunity for the applicant to dispute the information.

Key Facts

  • Virginia employers must comply with the federal Fair Credit Reporting Act (FCRA) for all background checks.
  • Employers must obtain written consent before conducting a background check on a job applicant.
  • Virginia does not have a state-specific ban-the-box law limiting conviction history inquiries.
  • Employers must provide notice and opportunity to dispute findings before taking adverse action.
  • Virginia law prohibits discrimination based on criminal history except in specific job-related circumstances.

Federal Law: The Baseline

The Fair Credit Reporting Act (FCRA), 15 U.S.C. § 1681 et seq., is the primary federal law governing background checks nationwide and applies in Virginia. Under the FCRA, employers must obtain written authorization from applicants before obtaining any consumer report (including background checks) from a consumer reporting agency. The law applies to all employers using third-party agencies to conduct background checks.

Before taking adverse action based on background check information, employers must provide the applicant with a copy of the report and a summary of their rights under the FCRA (typically called a "pre-adverse action notice"). The applicant then has an opportunity to dispute inaccurate information with the reporting agency. Only after this opportunity has passed may the employer proceed with adverse action.

The FCRA also requires that if adverse action is taken, the employer must provide the applicant with the name, address, and phone number of the consumer reporting agency that supplied the report. The Equal Employment Opportunity Commission (EEOC) enforces the FCRA in the employment context. Violations can result in damages, attorney fees, and civil penalties. Remedies include actual damages, statutory damages up to $1,000 per violation, punitive damages, and attorney fees.

Virginia Law: What's Different

Virginia does not have a state-specific background check statute that imposes requirements beyond the federal Fair Credit Reporting Act. However, Virginia law does regulate how employers may use criminal history in hiring decisions, which indirectly affects background check practices.

Virginia Code § 40.1-49.2 prohibits employers from discriminating in hiring based on criminal history, with narrow exceptions. An employer may consider or inquire about criminal history only if: (1) the conviction is directly related to the specific position being filled, (2) the conviction is for a felony or misdemeanor that occurred within the past 10 years (with some exceptions for certain positions like childcare or healthcare), or (3) the applicant is applying for a position in law enforcement or with direct access to children, the elderly, or vulnerable individuals. This statute effectively limits when employers can even ask about criminal history on applications and background checks.

Virginia Code § 19.2-392.2 permits the public disclosure of criminal records to employers for hiring purposes, which allows employers to access publicly available criminal history through background check agencies. However, Virginia does not restrict the timing of criminal history inquiries in the application process (no "ban-the-box" requirement)—unlike some states, employers in Virginia may ask about criminal history upfront on the application.

Virgia employers are still required to comply with the FCRA for any third-party background checks. The state has not enacted additional consent, notification, or dispute procedures beyond the federal requirements. Private employers in Virginia (those not covered by federal law due to size) are also bound by the FCRA's requirements if they use a third-party agency. Remedies under Virginia law for discrimination based on illegal consideration of criminal history include state employment discrimination claims, which may be pursued through the Virginia Commission for the Advancement of Social Equity or in court.

Key Numbers & Thresholds

Written consent must be obtained before background check is conducted. Applicant must receive pre-adverse action notice before any adverse employment decision is final. Applicant has reasonable time (typically 5 business days) to dispute information after receiving pre-adverse action notice. Criminal history may only be considered if conviction occurred within 10 years (with exceptions for certain positions). No minimum employer size threshold—FCRA applies to all employers using third-party background check agencies.

Exceptions & Special Cases

Virginia law provides several important exceptions to criminal history protections. Employers may disregard the 10-year limitation and consider older convictions if the applicant is applying for a position in law enforcement, corrections, childcare, education, healthcare, or positions involving direct access to children, the elderly, or vulnerable adults. These positions have legitimate business reasons to inquire about any criminal history regardless of age.

Another significant exception exists under federal law: certain positions are exempt from some FCRA procedures. For example, if an applicant is applying for a position in banking, finance, or positions requiring a security clearance, the FCRA allows some streamlined procedures. However, Virginia employers must still provide notice and opportunity to dispute.

The FCRA itself contains exceptions for government agencies conducting background checks—these are not subject to the full FCRA requirements that bind private employers. Additionally, background checks conducted in-house by the employer (rather than through a third-party agency) are not technically subject to FCRA requirements, though they may be subject to other state and federal discrimination laws.

Small employers who conduct background checks without using a third-party consumer reporting agency may not be technically covered by the FCRA, but they remain subject to Virginia Code § 40.1-49.2's restrictions on criminal history discrimination. The statute of limitations for FCRA violations is 2 years from discovery of the violation. Finally, Virginia employers may not use arrest records that did not result in conviction to make employment decisions, as these are considered unreliable evidence of criminal conduct.

What to Do If Your Rights Are Violated

Step 1: Document Everything. From the moment you suspect illegal background check practices, keep detailed records. Save the job application materials, job posting, the background check form you were asked to sign, any consent forms provided, and all communications with the employer about the background check. Photograph or copy the authorization form if you signed one in person. Document the date you applied, the date you were told a background check would be conducted, and the date you learned of an adverse decision. If the employer mentioned your criminal history or raised concerns about your background during interviews, note the date, what was said, and who said it. Save all emails and written communications. If background check information was inaccurate, obtain a copy of your actual criminal records from the Virginia State Police or the relevant courthouse to compare against what the employer claims.

Step 2: Internal Complaint Process and Why It Matters. Before filing a formal complaint, request a written explanation from the employer about the specific background check findings and why adverse action was taken. Send a written request (email or certified letter) to the company's HR department asking for: (1) a copy of the background report they obtained, (2) documentation of their pre-adverse action notice to you, and (3) an explanation of how the findings related to your job. This creates a paper trail and sometimes resolves issues informally. If the employer cannot provide proper documentation showing they followed FCRA procedures (written consent, pre-adverse action notice, adverse action notice), this strengthens your potential claim. Most employers will provide these documents if they followed the law properly. If they refuse or cannot produce them, this is evidence of a violation.

Step 3: File a Complaint with the Appropriate Agency. For federal FCRA violations, you may file a complaint with the Federal Trade Commission (FTC) at reportfraud.ftc.gov or by calling 877-438-4338. The FTC does not investigate individual complaints but uses them to identify patterns of violations. You may also file a complaint with the Consumer Financial Protection Bureau (CFPB) at consumerfinance.gov/complaint if the background check involves credit information. For Virginia-specific discrimination based on criminal history, file a complaint with the Virginia Commission for the Advancement of Social Equity (CASE) at case.virginia.gov or call 804-786-7926. Virginia has no state Human Rights Act, so CASE does not investigate employment discrimination in the traditional sense, but criminal history discrimination can be pursued. The filing deadline for FCRA violations is 2 years from discovery. The deadline for Virginia criminal history discrimination claims depends on how the claim is framed (if brought as a contract or tort claim, it may be 5 years; consult an attorney for the specific statute of limitations). No administrative filing fee is required for FTC or CASE complaints.

Step 4: The Investigation Process—What to Expect and Timeline. The FTC does not typically investigate individual FCRA complaints but will investigate if it identifies a pattern of violations affecting multiple consumers. If you file a state discrimination claim through CASE or with a private attorney, the investigation typically takes 60-120 days if pursued administratively. The employer will be contacted and asked to respond to the allegations. You may be asked for additional documentation of the background check, the job description, and evidence that the employer's decision was based on the background check findings rather than other factors. If the matter proceeds to litigation, discovery (document exchange) can take 6-12 months. The employer must provide copies of the actual background report, internal emails discussing your application, the job description, and any policies on criminal history consideration. Depositions (recorded interviews under oath) may occur. Settlement is common once both sides understand the strength of the evidence.

Step 5: When to Consult an Attorney and What Type. Consult an employment attorney as soon as you learn that an adverse decision is based on your background check, especially if you believe the information in the report is inaccurate or if you were not provided proper notice. You do not need an attorney to file an FTC complaint, but an attorney is essential if you plan to pursue a civil claim for damages under the FCRA or Virginia law. FCRA violations can result in significant damages (up to $1,000 per violation plus actual damages and punitive damages), making them attractive to employment law firms. Many employment attorneys work on contingency (you pay nothing upfront; they take a percentage of any settlement or judgment). Seek an attorney licensed in Virginia who practices employment law or consumer protection law. The Virginia State Bar Lawyer Referral Service is available at vsb.org or 800-552-3852. An attorney can help you identify whether the violation is primarily an FCRA issue (governed by federal law) or a Virginia criminal history discrimination issue, and which forum is most appropriate for your claim.

Relevant Agency

Federal Trade Commission (Consumer Sentinel Network)

https://reportfraud.ftc.gov

877-438-4338

If you've been denied employment due to background check issues, consider consulting an employment law attorney who can evaluate your FCRA claim.

Get notified when employment law changes

Laws change every year. We'll email you when something changes that affects this topic.

Frequently Asked Questions

Can a Virginia employer ask about criminal history on the initial job application?

Yes, Virginia employers may ask about criminal history on the job application—the state has no "ban-the-box" law restricting the timing of criminal history inquiries. However, employers may only consider or use that information for hiring decisions if the conviction is directly related to the job or occurred within the past 10 years (with exceptions for positions involving children, the elderly, or vulnerable adults). Employers in regulated industries like childcare, healthcare, and education may inquire about any criminal history regardless of age. The federal FCRA does require written consent before a background check is ordered, but this consent is typically obtained separately from the application form, often when the employer decides to move forward with your candidacy.

What if the background check contains inaccurate information about my criminal history?

Under the Fair Credit Reporting Act, you have the right to dispute inaccurate information in your background report. When an employer provides you with a pre-adverse action notice (which they must do before making an adverse decision), the notice will include the name and contact information of the background check company. You can contact the agency directly to dispute the error—you do not need to wait for or go through the employer. The consumer reporting agency must investigate your dispute within 30 days and correct or remove inaccurate information. You can also request that the employer provide an updated report. If the inaccuracy results in denial of employment and the employer does not get a corrected report, you may have a claim against both the background check company and the employer under the FCRA. Document the correct information (obtain official records from the Virginia State Police or the courthouse where the case was handled) and send it to the agency with your dispute letter.

How long does a Virginia employer have to make a decision after running a background check?

The FCRA does not specify a time limit for an employer to make a hiring decision after obtaining a background check. However, there is a mandatory pause required: if the employer intends to take adverse action (deny the job, terminate, demote) based on the background check, they must first provide you with a pre-adverse action notice and give you a reasonable time to dispute inaccurate information—typically 5 business days, though employers often allow longer. Only after this dispute period may the employer take final adverse action. In practice, employers often make decisions within days or weeks of receiving the background check, but the law requires compliance with the pre-adverse action process before any adverse action is final. If an employer makes an offer contingent on background check clearance, they must still follow the pre-adverse action procedure if the report contains information they intend to use against you.

What are my rights if an employer conducts a background check without my written consent?

Conducting a background check through a third-party agency without your written authorization is a violation of the Fair Credit Reporting Act. You have the right to sue the employer and the background check company for damages. Under the FCRA, you can recover actual damages (such as lost wages if you were denied the job), statutory damages of up to $1,000 per violation, punitive damages if the violation was willful, and your attorney fees. You do not have to prove that the employer acted in bad faith—the FCRA is strict liability for unauthorized reports. You should immediately contact an employment attorney in Virginia and provide them with evidence that no authorization form was signed. Save any communications from the employer about the background check (emails, forms, text messages). The statute of limitations is 2 years from discovery of the violation, so act quickly. The FTC and CFPB also accept complaints about unauthorized background checks, though they typically respond to patterns rather than individual cases.

Can a Virginia employer deny me a job because of a conviction that is more than 10 years old?

Generally, no. Virginia Code § 40.1-49.2 prohibits employers from considering convictions that occurred more than 10 years ago, unless you are applying for a position in law enforcement, corrections, childcare, education, healthcare, or a position with direct access to children, the elderly, or vulnerable individuals. For these regulated positions, employers may consider any conviction regardless of age. "Direct access" means positions where you would regularly interact with or have unsupervised contact with these groups. If an employer denies you a job based on an older conviction outside these exceptions, you have grounds for a state discrimination claim based on unlawful consideration of criminal history. However, note that the burden is on you to prove the employer's decision was based on the old conviction; employers can defend their decision by showing it was based on legitimate job-related factors unrelated to your record. If you believe your conviction should be removed from your record entirely (through expungement or restoration of rights), you may petition the Virginia circuit court—successfully obtaining an expungement strengthens your position in disputes with employers.

Related Topics in Virginia

See background check laws laws in every state →

Sources & References

  • 15 U.S.C. § 1681 et seq. (Fair Credit Reporting Act)Federal law governing all consumer reports including background checks
  • 15 U.S.C. § 1681b(b)(2)(A)Requires written disclosure and consent before background check
  • Virginia Code § 40.1-49.2Prohibits discrimination based on criminal history in hiring
  • Virginia Code § 19.2-392.2Allows disclosure of criminal records for employment purposes

Informational only. Not legal advice. Laws change — always verify with a licensed attorney.

Editorial standards: This guide is reviewed against primary government sources and cites 4 statutes. Last reviewed July 2026. Scheduled for re-verification by July 2027.

See our editorial policy for how content is created and verified, or report an inaccuracy.