Violate the FCRA and you're on the hook for actual damages, plus statutory damages commonly cited in the $100 to $1,000 range per violation if a court finds the violation willful. Punitive damages and the other side's attorney's fees can stack on top of that. None of it requires the candidate to prove they lost anything real.
That's the short version. The part that actually catches employers off guard is what happens after. These cases rarely stay about one candidate.
The FCRA doesn't treat every violation the same. There are two tiers, and which one you land in decides how bad your day gets.
A negligent violation means you made a real mistake, but you weren't reckless about it. The candidate can recover actual damages, the real dollar amount they can show they lost, plus costs and attorney's fees. They have to prove the harm.
A willful violation is different. That covers knowing you were breaking the rule, or not caring enough to check. Here, the candidate doesn't have to prove a specific loss at all. The statute lets a court award damages just because the violation happened.
So to say that again a different way: negligence costs you what you actually broke. Willfulness costs you what the law says a broken rule is worth, whether or not anyone can point to real harm. That's a much bigger number, and courts have read "willful" broadly enough that plenty of ordinary sloppiness gets swept into it.
For willful violations, the FCRA allows statutory damages commonly cited in the $100 to $1,000 per violation range, on top of any actual damages and on top of punitive damages a court decides to add. Attorney's fees for the winning candidate's side come out of your pocket too, and those fees often dwarf the statutory number itself.
I want to be careful here, because I've seen people treat that range like a fixed price tag. It isn't one. It's a commonly cited statutory range, not a guaranteed outcome, and the actual number in any real case depends on the facts, the court, and a lawyer arguing both sides. If you're trying to size your own risk, talk to an employment attorney instead of doing math off a number you read in an article. That part's not optional.
What matters more than the exact dollar figure is the word sitting right before it: per violation.
Here's the mechanism, and it's simpler than people expect. Most FCRA violations aren't about one employer treating one candidate badly. They're about paperwork, and paperwork doesn't change from candidate to candidate.
Say your disclosure form was folded into your job application instead of standing alone, which FCRA requires. That's not a mistake you made once. It's the form every candidate signed for as long as you used it. Same document, same defect, same violation, repeated exactly, candidate after candidate.
That sameness is exactly what a class action needs. A court doesn't have to sort through a thousand different stories to decide the case. It just has to answer one question: did the form comply or not? Either it did for everyone, or it didn't for everyone. That's about as easy as class certification gets, and plaintiff's attorneys know it.
Now multiply. Run 4,000 background checks a year with that same flawed form, and you're not looking at one violation. You're looking at up to 4,000 of them, each carrying its own statutory damages range, before punitive damages or fees even enter the picture. A mistake that felt small on any single application stops feeling small once it's added up across everyone you screened.
In my experience, it's almost never a dramatic decision that gets employers here. It's a form nobody rechecked. A few of the repeat offenders:
None of these sound like a lawsuit while they're happening. They sound like paperwork. That's the whole problem. A background check company can help you get the mechanics right, but the form itself is still yours to get correct.
I'm not telling you this to scare you into freezing up. Most of this is genuinely fixable with a real form review, done once, by someone who knows this law. What I am telling you is that laws like this change, courts read "willful" differently over time, and I'm not a lawyer. Get your actual forms checked by one. That part's worth the cost.