A California investigative consumer report is a background report that goes beyond raw credit data to describe your character, general reputation, personal characteristics, or mode of living, and state law gives you specific protections every time one is ordered on you. The Investigative Consumer Reporting Agencies Act, known as the ICRAA, requires the employer, landlord, or insurer requesting the report to tell you in writing and get your signed authorization first. It also sets strict limits on what the report can contain, gives you the right to see and dispute it, and lets you recover at least $10,000 if the rules are broken.
What Qualifies as an Investigative Consumer Report
California Civil Code Section 1786.2 defines an investigative consumer report as any consumer report containing information about your character, general reputation, personal characteristics, or mode of living, obtained by any means.1California Legislative Information. California Code Civil Code 1786.2 The phrase “by any means” matters. An older version of the law covered only information gathered through personal interviews; the current statute reaches database searches, social media reviews, and public records checks as well.
One carve-out: a report containing only factual credit-record data pulled directly from a creditor or a consumer reporting agency is not an investigative consumer report.1California Legislative Information. California Code Civil Code 1786.2 But once a background check adds criminal history, reference interviews, employment verification, or similar material, the ICRAA kicks in.
What the Requester Must Give You Before Running One
Before an employer orders an investigative consumer report on you, Section 1786.16 requires a written disclosure that is clear, conspicuous, and in a standalone document used only for that purpose. The disclosure must tell you that a report may be obtained, state the permissible purpose, explain that it may cover your character, reputation, personal characteristics, and mode of living, and give the name, address, and telephone number of the reporting agency doing the investigation.2California Legislative Information. California Code Civil Code 1786.16 It also has to describe the nature and scope of the investigation and summarize your rights under Section 1786.22.
Then you have to authorize the report in writing. The California Supreme Court confirmed in Connor v. First Student, Inc. that this written authorization requirement has no workaround, even when the background check also pulls credit data covered by a different statute.3Justia. Connor v. First Student, Inc.
The employer form must also give you a box to check requesting a copy of any report that is prepared. If you check it, the agency has to send you the report within three business days of delivering it to the requester.2California Legislative Information. California Code Civil Code 1786.16 Check it. That copy is often how people first spot the errors that cost them the job.
Insurance-related reports work slightly differently. The disclosure can appear on the application, medical form, or binder you sign. If no signed document is involved, the disclosure must be mailed or delivered to you within three days of the report being requested.2California Legislative Information. California Code Civil Code 1786.16
One narrow exception: when an employer is investigating suspected wrongdoing or misconduct by a current employee, the pre-report disclosure and authorization requirements do not apply.2California Legislative Information. California Code Civil Code 1786.16
What the Report Cannot Include
Section 1786.18 bars reporting agencies from putting certain outdated or sensitive information into an investigative consumer report:
- Bankruptcies more than 10 years after the order for relief.
- Lawsuits and satisfied judgments more than seven years after filing or entry.
- Unsatisfied judgments more than seven years after entry.
- Paid tax liens more than seven years after payment.
- Collection accounts more than seven years after placement.
- Criminal records more than seven years from the date of disposition, release, or parole. An arrest that did not result in a conviction must be removed once that outcome is known, and a conviction must be removed if a full pardon was granted.
- Any other adverse information more than seven years old.
- Medical debt, at all.
- Unlawful detainer actions where the tenant won or the case was resolved by settlement.
Two situations lift these limits: when the report is used to underwrite a life insurance policy of $250,000 or more, and when a government regulatory agency explicitly requires the employer to check for records that would otherwise be barred.4California Legislative Information. California Code CIV 1786.18
The agency also has to verify the accuracy of any public-record information about arrests, convictions, civil actions, tax liens, or outstanding judgments within the 30 days before the report is furnished.4California Legislative Information. California Code CIV 1786.18 Stale public records are a common source of wrongful denials.
Your Right to See the File and Dispute Errors
Under Section 1786.22, the reporting agency must make your file available to you in three ways: in person with proper identification, by certified mail on written request, or by telephone summary if you write in and cover any toll charges.5California Legislative Information. California Code CIV 1786.22 The agency has to provide trained personnel to walk you through what is in the file and a written key to any codes used.
If something is wrong or incomplete, you can demand a reinvestigation. The agency then has to verify or correct the disputed entry. Agencies that ignore reinvestigation requests or wave disputed entries through as accurate open themselves up to the full penalty provisions of the statute.
The accuracy duty itself rests on the agency, not on the employer or landlord who ordered the report. Section 1786.20 requires the agency to follow reasonable procedures to assure the maximum possible accuracy of the information in every report it prepares.6California Legislative Information. California Code CIV 1786.20 A user who knows or should know that report data is wrong and acts on it anyway can also face liability.
What Happens If You Are Denied Based on the Report
When insurance, employment, or a rental application is denied in whole or in part because of an investigative consumer report, the person who took the adverse action must notify you and give you the name and address of the reporting agency that prepared it.7California Legislative Information. California Code Civil Code 1786.40 The same rule applies when an insurer raises your premium or a landlord raises your rent based on report findings.
That notice is your gateway to the rest of your rights. Once you know which agency produced the report, you can request the file, review it, and start the dispute process if something is wrong.
What You Can Recover If the Rules Are Broken
Section 1786.50 lets you sue any reporting agency or user that fails to comply with the ICRAA. You can recover the greater of your actual damages or $10,000 in statutory damages, plus court costs and reasonable attorney’s fees.8California Legislative Information. California Code Civil Code 1786.50 The $10,000 figure is a floor. If you prove actual damages above it, you recover the higher amount. In class actions, individual class members are limited to actual damages.
For grossly negligent or willful violations, the court can award punitive damages on top of everything else, with no statutory cap.8California Legislative Information. California Code Civil Code 1786.50 One safe harbor exists: if the violation produced a report that was actually more favorable to you, no liability attaches.
You have two years from the date you discover a violation to file suit.9California Legislative Information. California Code Civil Code 1786.52 The clock runs from discovery, not from the violation itself, which matters because people often only learn about a flawed report when they finally receive an adverse-action notice months later. The ICRAA also preserves your right to bring separate claims for invasion of privacy or defamation, which carry their own limitations periods.
How This Fits with Credit Reports and Federal Law
California has two overlapping statutes. The ICRAA covers investigative consumer reports; the Consumer Credit Reporting Agencies Act, or CCRAA, covers standard credit reports. In Connor v. First Student, Inc., the California Supreme Court held that when a background check contains both credit information and character or reputation information, the company has to comply with both laws.3Justia. Connor v. First Student, Inc. If an employer pulls only credit records, the CCRAA governs alone. The moment a report touches character, reputation, or personal characteristics, the ICRAA applies and written authorization under Section 1786.16 is required.
The federal Fair Credit Reporting Act sets a national baseline, and California’s ICRAA layers stricter protections on top: a standalone disclosure document, written (not just oral) authorization, and a higher statutory damages floor. One wrinkle under Section 1786.52: you cannot recover under both the ICRAA and the FCRA for the same act or omission, and a final federal judgment bars a later state claim on the same conduct.9California Legislative Information. California Code Civil Code 1786.52 If you believe a report has harmed you, that choice of forum is worth discussing with a lawyer before filing.