Is It Legal to Run a Background Check on Someone 2026

Yes, it is legal to run a background check on someone in the United States, but the rules that govern when, how, and by whom are strict. The Fair Credit Reporting Act sets the national framework, and breaking those rules can cost you thousands of dollars per violation.

Most people assume that background checks are only something employers do. That’s not accurate. Landlords, lenders, dating partners, and even curious private citizens run them every day. The law treats each of those situations very differently.

This article covers every angle of background check legality in 2026. You’ll learn what requires consent, what doesn’t, which states add extra rules, and what happens to people who run checks they’re not legally allowed to run.

You might also find this useful — Is It Illegal to Have a Crack in Your Windshield? 2026

The rules are more specific than most people realize. Let’s get into it.

Is It Legal to Run a Background Check on Someone

Running a background check on someone is legal in the United States under specific conditions. The legality depends on who is doing the check, why they’re doing it, and how they obtained the information.

The Fair Credit Reporting Act (FCRA) is the primary federal law governing background checks. It applies whenever a consumer reporting agency (CRA) is involved in compiling or providing the information. FCRA-covered checks include employment screening, tenant screening, and credit-based decisions.

Not every search falls under the FCRA. Googling someone’s name or looking at their public social media is not a “background check” in the legal sense. But using a paid background check service or a consumer reporting agency absolutely is.

Here’s the basic legal test:

• Who is running the check: Employers, landlords, and lenders operate under FCRA rules. Private individuals have fewer restrictions but still face limits.
• What service is used: FCRA-covered CRAs require permissible purpose. General web searches do not.
• What the information is used for: Using report data to deny employment or housing triggers specific legal obligations.

Quick Facts:

• The FCRA has been federal law since 1970.
• The FTC and CFPB jointly enforce FCRA compliance.
• Violations can result in civil penalties of up to $1,000 per willful violation for individuals, with class action exposure for companies.
• Background checks through CRAs require a documented permissible purpose.

Is It Illegal to Do a Background Check on Someone

Running a background check on someone is not automatically illegal, but doing it the wrong way or for the wrong reason is a federal violation. The FCRA draws a clear line between legal and illegal checks.

A background check becomes illegal when it is run through a consumer reporting agency without a permissible purpose. It is also illegal to obtain someone’s consumer report under false pretenses. FCRA Section 619 makes obtaining a consumer report under false pretenses a federal crime punishable by up to two years in prison.

Outside of the FCRA, state laws create additional restrictions. California, for example, has its own Investigative Consumer Reporting Agencies Act (ICRAA), which applies specific rules to investigative background reports beyond what federal law requires.

Common ways people accidentally cross the legal line:

• Using a professional background check service for personal curiosity with no legitimate purpose.
• Accessing a credit report on someone without authorization.
• Running a check on an employee without providing required FCRA disclosures.
• Using a background check service’s terms of service that prohibit personal use.

Is It Legal to Do a Background Check on Someone

The answer is yes, with conditions that depend heavily on your relationship to the person and your reason for checking. Background checks are legal tools when used correctly by the right people for the right purposes.

Employers run background checks legally every day. Landlords screen tenants legally. Lenders pull reports legally. All of these fall within the FCRA’s permissible purpose framework, which lists the exact situations where running a check is authorized.

The question that trips people up is this: can anyone run a check on anyone, for any reason? The answer is no. Consumer reporting agencies are legally required to sell reports only to customers who have a permissible purpose. If you lie about your purpose, you’ve committed a federal offense.

Here’s what legal use looks like in practice:

• An employer running a pre-hire criminal background check with the applicant’s written consent.
• A landlord screening a rental applicant who signed an authorization form.
• A lender pulling a credit report to evaluate a loan application.
• A licensed private investigator running a check for an authorized legal purpose.

These scenarios all share two things: a recognized permissible purpose and, in most cases, prior notification or consent from the subject. That combination is what keeps a background check legal.

Key Takeaway: Running a background check is legal when you have a permissible purpose under the FCRA and follow the required consent and disclosure rules. Running one out of personal curiosity through a CRA is a federal violation.

Is It Legal to Run a Background Check Without Permission

Running a background check without permission is legal in some situations and illegal in others. The distinction comes down to whether the FCRA applies to the type of check being conducted.

For employment, tenant screening, and credit decisions, running a check without proper consent is an FCRA violation. These situations require advance written disclosure and, in most cases, written authorization from the subject before the check can legally proceed.

For general information gathering using public sources, such as searching court records online, looking at property records, or reviewing public social media, no permission is legally required. Public records are public. Accessing them doesn’t require the subject’s consent.

The gray zone is this: many background check websites market themselves to general consumers but are actually consumer reporting agencies under the law. Using one of those sites without a permissible purpose, even if you didn’t know it was a CRA, can still create legal exposure.

Always check a service’s terms of use before running a check. Most legitimate background check companies explicitly state that their service cannot be used for personal decisions about individuals outside of an employment or tenant context.

Do You Need Consent to Run a Background Check

Consent is required for FCRA-covered background checks used in employment, housing, or credit decisions. For other types of information gathering using purely public data, consent is not legally required.

The FCRA’s consent requirement is specific. Under FCRA Section 604(b)(2)(A), an employer must make a clear and conspicuous written disclosure to the applicant before procuring a consumer report. That disclosure must be on a standalone document, not buried in an employment application. Then the applicant must provide written authorization.

Landlords follow a similar process. A prospective tenant must authorize the screening before the landlord can pull a report from a consumer reporting agency.

What consent does NOT require, legally:

• Searching someone’s name in Google.
• Looking up their public court records on a county website.
• Reviewing their public LinkedIn, Facebook, or other social media profiles.
• Checking public property records.

The practical reality is that consent requirements catch a lot of employers and landlords off guard. Many small businesses skip the standalone disclosure form, not knowing it’s required. That mistake alone can generate FCRA liability.

Quick Facts:

• Written consent is required before any FCRA-covered background check.
• The disclosure must be on a separate document from the application.
• Verbal consent is not sufficient for FCRA compliance.
• State laws in California, New York, and Massachusetts add additional consent and notice requirements beyond federal minimums.

Can You Run a Background Check on Someone Without Their Knowledge

Using a consumer reporting agency to run a background check on someone without their knowledge is illegal under the FCRA for employment, housing, and credit purposes. For public records searches, no notification is required.

This is one of the most searched questions in this area, and the answer surprises a lot of people. The FCRA does not require you to tell someone you’re researching them through public records. But it absolutely requires prior written notice if you’re using a CRA to pull a formal report for a covered purpose.

The distinction matters because the consequences are vastly different:

• Googling someone without their knowledge: completely legal.
• Running a formal background check through a CRA service without their knowledge for employment: FCRA violation.
• A private investigator doing skip tracing without notifying the subject: legal in many contexts.

There’s also a practical issue with stealth checks in employment. If an employer runs a background check on a current employee without their knowledge, and the employer is using that information to make an employment decision, that’s an FCRA violation even for existing employees, not just job applicants.

Key Takeaway: The FCRA requires prior written notice before any background check through a consumer reporting agency for employment, housing, or credit. Searching public records on anyone, without notifying them, remains fully legal.

What Is a Permissible Purpose Background Check

A permissible purpose background check is a check that falls within one of the legally recognized reasons listed in FCRA Section 604 for obtaining a consumer report. Without a permissible purpose, the check is unauthorized and illegal under federal law.

The FCRA lists these permissible purposes explicitly:

• Employment purposes: Hiring, promotion, reassignment, or retention of an employee.
• Credit transactions: When the consumer initiates a credit transaction or the check is used to review an existing account.
• Insurance underwriting: When a consumer applies for insurance.
• Tenant screening: For reviewing a rental applicant’s background.
• Licensing: For reviewing applicants for professional licenses requiring background clearance.
• Legitimate business need: When there is a clear, legitimate business reason involving the consumer.
• Court orders or subpoenas: When ordered by a court.
• Child support enforcement: In specific government-authorized situations.

The “legitimate business need” category is the broadest and also the most frequently abused. A company can’t claim a legitimate business need just to satisfy curiosity. The need must connect directly to a business relationship with the person being checked.

Consumer reporting agencies are required by law to have procedures to verify that customers claiming a permissible purpose actually have one. When a CRA fails to do this and a report is misused, the CRA can also face legal liability alongside the person who pulled the report.

Here's something related: Is It Illegal to Get a Happy Ending? 2026 State Laws

Can a Private Person Run a Background Check

A private individual can legally run a background check on another person, but the method and purpose determine whether it’s legal. Using public sources is generally fine. Using consumer reporting agencies requires a permissible purpose.

This is the question that most background check articles completely ignore. The answer has two parts. First, private citizens can freely access public records including court filings, property records, sex offender registries, and voter rolls where publicly available. No law restricts that access for ordinary people.

Second, if a private individual uses a paid background check service that qualifies as a consumer reporting agency under the FCRA, they must still have a permissible purpose. Most CRAs explicitly prohibit personal use in their terms of service precisely because personal curiosity is not a permissible purpose.

Think of it this way: pulling public court records yourself is like going to a library. It’s open, it’s legal, and no one needs to know. Using a CRA service for personal reasons is more like someone using a prescription pad they’re not authorized to use. The information might be similar, but the process creates legal exposure.

What private individuals can legally do:

• Search public court records online or in person.
• Review property records at the county level.
• Check sex offender registries (publicly available in all 50 states).
• Search social media profiles that are set to public.
• Use “people finder” websites that operate outside FCRA coverage.

What private individuals cannot legally do:

• Use a CRA’s service for unauthorized personal purposes.
• Obtain someone’s credit report without consent and permissible purpose.
• Access private databases through misrepresentation.

Can You Run a Background Check on a Date

Running a background check on someone you’re dating or planning to date is legal if you use public records or non-CRA tools. Using an FCRA-covered consumer reporting agency for this purpose is not legally authorized under federal law.

Dating safety is a real concern, and the market has responded. Several apps and services specifically designed for dating background checks exist and operate legally by pulling only public records, not consumer reports from CRAs. These services avoid FCRA territory entirely.

Services marketed specifically to singles for dating safety typically pull:

• Criminal records from public court databases.
• Sex offender registry data (public in all 50 states).
• Public civil court records like restraining orders.
• Social media profile verification.

Quick Facts:

• Dating-specific background check apps are legal because they use public records, not CRA-compiled consumer reports.
• Using a standard employment background check service to vet a date violates the service’s terms of use and potentially the FCRA.
• No federal law requires notification before checking someone’s public criminal record.
• Some states have specific database access rules, but public sex offender registry searches are always legal.

The practical bottom line: if you’re nervous about someone you met online, using a public records search or a purpose-built dating safety app is both legal and reasonable. Just don’t use a service that markets itself to employers and expects you to check an authorization box. That creates problems.

Key Takeaway: Private individuals can legally research other people through public records and non-CRA tools. The FCRA only applies to consumer reporting agencies and restricts personal curiosity checks through those services.

Is It Legal to Background Check a Neighbor

Checking a neighbor’s public records is legal in all 50 states. Using a consumer reporting agency to pull a formal background report on a neighbor for personal reasons is not an authorized permissible purpose under the FCRA.

Most people who want to background check a neighbor are concerned about safety. Maybe a new person moved in and something seems off. Maybe there’s a registered sex offender living nearby. These are legitimate concerns, and the law gives you legitimate tools to address them.

What you can legally do regarding a neighbor:

• Search your state’s sex offender registry. All 50 states have publicly accessible online registries.
• Look up public court records, including criminal convictions, restraining orders, and civil judgments.
• Search property records to see who owns a property.
• Use a general web search or social media review.

What you cannot legally do:

• Pull a formal consumer report on a neighbor through a CRA without a permissible purpose.
• Access their credit history or financial records.
• Misrepresent your identity or purpose to obtain information about them.

Employer Background Check Laws

Employers must follow the FCRA when running background checks on job applicants or employees. Failing to follow required steps creates federal liability and, in many states, state law liability as well.

The FCRA employer requirements are specific and non-negotiable. Before an employer can order a consumer report from a CRA, they must:

1. Provide a clear, standalone written disclosure that a report may be obtained.
2. Obtain the applicant’s or employee’s written authorization.
3. Follow adverse action procedures if the report influences a negative hiring decision.

The adverse action process is where most employers slip up. If a background check contributes to a decision not to hire someone, the employer must first provide a pre-adverse action notice with a copy of the report and a summary of the applicant’s rights. The applicant then gets time to dispute inaccurate information. Only after that waiting period can the final adverse action notice be sent.

Skipping any of these steps opens the employer to FCRA lawsuits. Individual damages are capped at $1,000 per willful violation plus attorney fees. Class action suits involving thousands of applicants have resulted in multi-million dollar settlements against major employers.

Background Check Laws by State

State background check laws add requirements on top of the FCRA, and in some states, those additions are significant. Employers and landlords operating in states like California, New York, and Illinois face stricter rules than the federal baseline.

Here’s a state-by-state comparison of key background check law distinctions:

California is consistently the most restrictive state. The ICRAA applies different rules to “investigative consumer reports,” which involve interviews with the subject’s acquaintances or associates, requiring a mandatory seven-day advance notice before the report is ordered.

Key Takeaway: State laws frequently add requirements beyond the FCRA, especially regarding criminal history use in hiring. Employers operating in multiple states must comply with the strictest applicable rule in each jurisdiction.

Ban the Box Laws by State

Ban the box laws prohibit employers from asking about criminal history on job applications. As of 2026, more than 35 states and over 150 cities and counties have enacted some form of ban the box policy.

The term “ban the box” refers to the checkbox on many job applications that asks: “Have you ever been convicted of a crime?” These laws delay that question until later in the hiring process, typically until after a conditional job offer has been made.

Here’s where key ban the box laws stand in 2026:

Ban the box does not ban criminal history checks entirely. It only delays them. Employers can still run a full background check. They simply can’t screen people out at the application stage based on a checkbox.

The EEOC has issued guidance encouraging all employers to consider the nature of the offense, how much time has passed, and the nature of the job before making any criminal history-based decision. This guidance applies regardless of state ban the box laws.

A related guide: Is It Illegal to Walk Around Without ID? 2026 Laws

Penalties for Illegal Background Checks

Penalties for violating FCRA background check rules include civil fines, statutory damages, actual damages, punitive damages, and in extreme cases, criminal prosecution. The financial exposure can be substantial.

Under FCRA Section 616 (willful noncompliance), a person or company that willfully violates the Act is liable for:

• Actual damages suffered by the consumer, or statutory damages ranging from $100 to $1,000 per violation.
• Punitive damages at the court’s discretion.
• Attorney fees and court costs.

Under FCRA Section 617 (negligent noncompliance), liability covers actual damages plus attorney fees, but not statutory or punitive damages.

The FTC regularly adjusts civil penalty amounts for inflation. As of 2026, civil penalties for CRA violations can exceed $46,000 per violation in FTC enforcement actions.

Class action lawsuits have been particularly damaging for employers who failed to provide proper FCRA disclosures. Companies including Amazon, Whole Foods, and Dollar General have settled FCRA class actions for millions of dollars over disclosure and consent failures.

Background Check Consent Requirements

Written consent is required before any FCRA-covered background check for employment, housing, or credit decisions. The consent must be obtained on a standalone document before the report is ordered. Nothing retroactive counts.

The FCRA is very specific about what consent must look like. A disclosure buried inside an employment application is not compliant. A blanket authorization form that covers multiple purposes may not be compliant either. Courts have consistently ruled that the standalone requirement is strict.

Key consent requirements under FCRA Section 604(b):

• The disclosure must clearly state that a consumer report may be obtained.
• It must be presented in a document consisting solely of the disclosure.
• The applicant must sign written authorization before the report is procured.
• For investigative consumer reports specifically, additional notices are required under FCRA Section 606.

State-level additions include:

• California: Must disclose within three days if an investigative consumer report is requested. Must disclose the nature and scope of the investigation.
• New York: Must provide specific notices under the New York City Fair Chance Act before running a check.
• Massachusetts: Must provide applicants with a copy of their CORI (Criminal Offender Record Information) if used against them in a housing or employment decision.

Quick Facts:

• The standalone disclosure requirement has been the source of more FCRA lawsuits than almost any other provision.
• Adding even one unrelated sentence to the disclosure form can make it non-compliant.
• Electronic consent is generally acceptable as long as the other requirements are met.
• Consent obtained after a report is already ordered is not valid.

What Information Can Be Found on a Background Check Legally

A legally conducted background check can reveal criminal history, credit history, employment history, education verification, driving records, civil court records, and identity verification. What appears depends on the type of check and the state where records were generated.

The FCRA places time limits on how far back certain information can appear in a report used for employment or tenant screening when the annual salary is below $75,000. Above that threshold, the time limits are lifted.

Criminal arrests that did not result in conviction are particularly restricted in some states. California, for example, prohibits employers from considering arrests without conviction at all under the California Fair Employment and Housing Act.

Federal background checks for security clearances operate under completely different rules. Those checks have no time limits and access sources unavailable to standard consumer reporting agencies.

Key Takeaway: Background check content is governed by both federal FCRA time limits and state laws that may further restrict what can appear. The $75,000 salary threshold is a frequently overlooked but significant distinction.

FCRA Background Check Rules

The Fair Credit Reporting Act sets the national rules for background checks in the United States. First enacted in 1970 and significantly amended in 1996, 2003, and 2010, the FCRA defines who can run checks, for what purpose, and what protections consumers have.

The core FCRA rules that apply to background checks in 2026:

• Section 604: Permissible purposes. Only listed purposes authorize a CRA to provide a consumer report.
• Section 604(b): Employment-specific rules requiring written disclosure and authorization.
• Section 606: Additional requirements for investigative consumer reports.
• Section 607: CRA obligations to verify user purposes and maintain accuracy.
• Section 609: Consumer rights to see their own reports.
• Section 611: Consumer dispute rights for inaccurate information.
• Section 615: Employer and user obligations when taking adverse action.
• Section 616: Civil liability for willful noncompliance.
• Section 617: Civil liability for negligent noncompliance.
• Section 619: Criminal liability for obtaining reports under false pretenses.

The Consumer Financial Protection Bureau (CFPB) publishes consumer guides to the FCRA. The FTC enforces FCRA violations against businesses and consumer reporting agencies. Both agencies have active enforcement programs in 2026.

One important point that confuses many people: the FCRA does not apply to every background check. If a landlord personally calls a previous landlord to ask about a tenant, that’s not a consumer report. The FCRA only applies when a consumer reporting agency is involved in compiling or selling the information.

Frequently Asked Questions

Is it legal to run a background check on someone without their knowledge?

It depends on the method used and the purpose.
Using a consumer reporting agency for employment or housing without prior written notice is an FCRA violation.
Searching someone’s public records or social media without their knowledge is legal in all 50 states.
The FCRA requires advance disclosure, not notification after the fact.

Can a private individual legally run a background check on another person?

Yes, private individuals can legally search public records on anyone.
Using a consumer reporting agency requires a permissible purpose, and personal curiosity does not qualify.
Many “people finder” websites operate outside FCRA coverage and are legal for general personal use.
Pulling someone’s credit report or formal consumer report without authorization is a federal violation.

What are the penalties for running an illegal background check?

Willful FCRA violations carry statutory damages of $100 to $1,000 per violation plus punitive damages and attorney fees.
Obtaining a consumer report under false pretenses is a federal crime with up to two years in prison.
Class action suits have resulted in multi-million dollar settlements against companies with systemic violations.
FTC civil penalties against consumer reporting agencies can exceed $46,000 per violation.

Do employers need written consent before running a background check?

Yes, FCRA Section 604(b) requires written disclosure and written authorization from the applicant.
The disclosure must be on a standalone document, not combined with an employment application.
The consent must be obtained before the report is ordered, not after.
Several states including California, New York, and Massachusetts add requirements beyond this federal baseline.

What is a permissible purpose under the FCRA?

A permissible purpose is one of the legally recognized reasons listed in FCRA Section 604 for obtaining a consumer report.
Recognized purposes include employment, credit transactions, insurance underwriting, tenant screening, licensing, and legitimate business needs involving the consumer.
Personal curiosity is not a permissible purpose.
Consumer reporting agencies are legally required to verify that customers have a permissible purpose before providing any report.

Background check law is one of those areas where the gap between what people think is allowed and what’s actually legal is surprisingly wide. The rules are specific, the penalties are real, and the FCRA has been actively enforced for decades.

Bookmark this page for future reference. As states continue updating privacy and fair chance laws in 2026 and beyond, the rules around background checks will keep evolving. Staying current is the only way to stay protected.

Along the same lines: Is It Illegal to Borrow Money for a Down Payment? 2026