Yes. If a consumer reporting agency (a CRA, the company that actually runs the background check) pulls a report on someone so you can decide whether to hire, retain, or keep working with them, the Fair Credit Reporting Act's consent rules apply. That's true no matter what you plan to call the person on paper.
W-2 employee, 1099 contractor, gig worker you found through an app. The law doesn't sort people that way. It sorts by why you're pulling the report, not what tax form shows up in January.
The FCRA uses a specific phrase, "employment purposes." That sounds like it should only mean actual employees on payroll. In practice, it hasn't worked that way for a long time.
The statute defines employment purposes as evaluating someone for hiring, promotion, reassignment, or retention as an employee. But regulators and courts have generally read that word broadly, especially once a check touches someone doing ongoing work for you, even under a contract instead of a W-2.
So to say that a different way: the test isn't your org chart. It's whether you're using the report to decide if this person works for you in some capacity. A staffing agency placing a contractor. A platform vetting drivers. A small business bringing on a freelance bookkeeper. All of that counts.
That part's not optional just because the paperwork says "contractor."
Once FCRA applies, the mechanics are the same no matter the worker type. You need a clear, standalone written disclosure telling the person you're going to run a background check. Not buried in an offer letter. Not mixed into other paperwork.
You also need their written authorization before you order the report, and a permissible purpose behind it, meaning a real reason tied to the work, not curiosity.
If the report comes back and you're leaning toward turning them down, or ending the relationship, because of something in it, the same pre-adverse action and adverse action steps apply too. A copy of the report. A summary of rights. A real waiting period before you finalize anything. None of that changes because the person invoices you instead of showing up on payroll.
I hear this one constantly from small businesses hiring their first contractor, and from platforms scaling up gig work fast. The thinking usually goes: "They're not really my employee, so employment law doesn't apply here."
That instinct is mostly right for things like overtime pay, workers' comp, or unemployment insurance. Those areas genuinely turn on classification.
Background check consent isn't one of them. FCRA was built around the report and the reason you're pulling it, not around benefits eligibility or how someone gets paid. Mixing those two questions up is the actual mistake, and I see it a lot.
Here's where I'll add a real complication instead of pretending this is simple. Whether someone legally counts as a contractor at all is its own contested question, with its own tests: the IRS's control-based factors, the economic realities test, ABC tests that some states apply. Those tests weigh things like who sets the hours, who supplies the tools, and how much day-to-day control you actually exercise.
I'm not going to tell you how those tests come out for your situation. That's a genuinely disputed area right now, state by state and sometimes agency by agency. Getting it wrong exposes you to real misclassification risk, and that risk has nothing to do with background screening.
Here's the part worth holding onto. Running the same FCRA disclosure and authorization process for a contractor doesn't make them an employee for tax or wage purposes. Those are separate legal questions, decided by separate tests, run by different agencies. Get the FCRA piece right regardless of how the classification question eventually shakes out.
| Worker type | Needs FCRA consent if a CRA runs the report? |
|---|---|
| W-2 employee | Yes |
| 1099 independent contractor | Yes |
| Gig worker hired through an app or platform | Yes, whoever actually orders the report needs it in place |
| Volunteer or unpaid role | Usually yes, if the report is pulled for a business purpose. Confirm with your provider |
If you're a small business hiring a contractor yourself, not through a staffing agency or a platform that already handles this, the process looks close to a regular hire. Send the standalone disclosure. Get signed authorization back. Order the report through your CRA. Wait for it. Follow adverse action steps if you're leaning toward saying no.
If you're working through a staffing agency or a gig platform, ask them directly who actually orders the report, and whose disclosure and authorization the worker signed. Sometimes that's the platform. Sometimes it's you. Don't assume.
I've seen employers assume the platform handled it, and the platform assume the employer did, and neither one actually had a signed authorization on file. That gap, not the classification debate, is where the real legal exposure lives.