Investigative Consumer Reports Under the ICRAA: Notice and Disputes

Investigative consumer reports under the ICRAA are background reports about your character, general reputation, personal characteristics, or mode of living, ordered in California by employers, insurers, landlords, and a short list of others. California’s Investigative Consumer Reporting Agencies Act gives you the right to be told a report is coming, to authorize it in writing (for employment), to see and correct what is in your file, and to collect a minimum of $10,000 per violation if the rules are broken.¹

What Counts as an Investigative Consumer Report

The trigger is subject matter, not method. If a report addresses your character, general reputation, personal characteristics, or mode of living, it is an investigative consumer report under Civil Code § 1786.2, and the statute says that information can be “obtained through any means.”² Interviews with neighbors and coworkers fit. So do database pulls, online research, and social media review, as long as the report goes to character or lifestyle.

A plain credit check that pulls data from creditor records is not an investigative consumer report. The California Supreme Court, in Connor v. First Student, Inc., held that a background check reporting on character or reputation falls under the ICRAA even when a separate consumer credit reporting statute also applies to it.³ In other words, the reporting company cannot escape ICRAA by pointing to another law that also covers the same report.

Who Is Allowed to Order One

Civil Code § 1786.12 limits investigative consumer reports to specific permissible purposes:

A court order or subpoena.
Your own written instructions.
Employment screening of a job candidate or current employee.
Insurance underwriting or rating.
Government licensing where the agency must consider your financial responsibility by law.
Enforcement of a court-ordered support obligation.
Rental housing evaluation by a prospective landlord.

Any report furnished outside these categories violates the statute.⁴ A curious neighbor, a business competitor, or a former partner cannot lawfully obtain one.

Notice and Written Authorization Before the Report Is Ordered

Civil Code § 1786.16 sets what you must receive before someone runs an investigative consumer report on you, and the rules differ by context.

Employment

An employer must give you a written disclosure in a document that contains nothing else. That standalone document has to say an investigative consumer report may be made, describe the permissible scope of the inquiry, and name the reporting agency with its address and phone number. You then have to authorize the report in writing before it can go forward.⁵

The standalone-document rule is where employers most often slip up. Burying the ICRAA disclosure inside an application packet or combining it with other forms violates the statute; the California Supreme Court treated exactly that kind of failure as actionable in Connor.³

The disclosure form also has to include a checkbox letting you request a copy of the finished report. That checkbox is not optional for the employer to include, and if you check it, the employer must send you the completed report.⁵

Insurance and Rental Housing

An insurer using an investigative report for underwriting must clearly disclose in writing that one may be requested. A landlord must notify you in writing within three days of first requesting the report, which is looser than the employment rule.⁵

Electronic Signatures

Written authorization does not have to be pen on paper. Under the federal Electronic Signatures in Global and National Commerce Act, an electronic signature counts, but only if you affirmatively consent in a way that shows you can actually access electronic records. Before collecting that consent, the requestor must tell you about your right to receive paper records, your right to withdraw consent, and the hardware or software needed to view the electronic version. Oral agreement alone does not satisfy the statute.⁶

The Wrongdoing Investigation Exception

Employers investigating suspected misconduct by a specific person can skip the § 1786.16 disclosure and authorization steps for that individual.⁵ The exception requires actual suspicion aimed at you, not routine pre-hire screening and not a general workplace sweep with no particular target. Used outside those limits, the report was procured in violation of the ICRAA, and the employer carries the same penalty exposure as any other violation.

Your Right to See Your File

Once a report exists, Civil Code § 1786.10 gives you the right to inspect everything the agency has on you, and the agency must make it available during normal business hours.⁷ You can do this three ways:

In person, with valid identification and reasonable notice. Trained staff must be available to walk you through coded entries or technical notations, and you can bring one companion, though the agency may ask for written permission to discuss your file in front of that person.
By certified mail, with a written request and identifying information.
By telephone, after a written request for phone disclosure with proper identification; you may need to prepay long-distance charges.

The agency can charge for file disclosure, but no more than $8.⁸ For in-person inspections where you want physical copies, the fee is limited to actual duplication costs, and the agency has to tell you the charge before handing anything over.⁹

Disputing Errors in Your File

If something in your file is wrong, you can dispute it directly with the reporting agency, and the agency must reinvestigate at no charge. It has 30 days from receipt of your dispute to finish that reinvestigation.¹⁰

During the reinvestigation, the agency has to notify whoever originally supplied the disputed information and share whatever you sent in support of your challenge. If the item turns out to be inaccurate, incomplete, or unverifiable, the agency must delete or correct it and notify you of the change.¹⁰

Deleted information cannot be reinserted unless the original source verifies it is complete and accurate, and if the agency does reinsert it, you must be told promptly. The agency can decline to investigate a dispute it reasonably considers frivolous, but it must tell you that and explain why.

What Cannot Appear in Your Report

Civil Code § 1786.18 bars agencies from including outdated information. The cutoffs vary by category:

Bankruptcies: more than 10 years after the order for relief.
Criminal records: arrests, indictments, misdemeanor complaints, and convictions cannot be reported more than seven years from the date of disposition, release, or parole. A conviction that resulted in a full pardon cannot be reported at all. Arrests that never led to a conviction cannot be reported either, except while the case is still pending.
Civil suits and judgments: seven years from the date of filing (suits) or entry (judgments), whether satisfied or not.
Paid tax liens: seven years from the date of payment.
Collection accounts: seven years from the date placed for collection or charged off.
Medical debt: cannot be included at all.
Unlawful detainer actions: cannot be reported if you were the prevailing party or the case was resolved by settlement.
Any other adverse information: seven years.

Pay attention to how the criminal-records clock runs. The seven years begin at disposition, release, or parole, not at arrest or conviction. Someone released in 2020 can still see that entry on a report ordered in 2026. The outright ban on reporting medical debt is a more recent addition to the statute.¹¹

Agencies also have to follow reasonable procedures to ensure the maximum possible accuracy of the information they report.¹²

If an Employer Uses the Report Against You

When an employer decides not to hire you, fires you, or takes another adverse action based even partly on an investigative consumer report, federal law imposes a two-step notice process.

Before the decision is final, the employer must give you a copy of the report and a written summary of your rights under the Fair Credit Reporting Act.¹³ That pre-adverse-action step gives you a window to review the report and flag errors.

After the final adverse decision, the employer must send a second notice with the name, address, and phone number of the reporting agency, a statement that the agency did not make the decision, and notice of your right to get a free copy of the report within 60 days and to dispute any inaccurate information.¹⁴ The FCRA does not fix an exact number of days between the two notices, but rushing the gap invites a claim that the waiting period was not reasonable.

Penalties, Attorney’s Fees, and the Filing Deadline

An agency or report user that fails to comply with the ICRAA is liable to the affected consumer for a minimum of $10,000 per violation or actual damages, whichever is greater. That $10,000 floor applies to individual claims; in class actions the floor does not apply and recovery is limited to actual damages.¹

When a violation is grossly negligent or willful, the court can add punitive damages on top of the statutory or actual damages, and a successful plaintiff also recovers litigation costs and reasonable attorney’s fees.¹

You have two years from the date you discover a violation to file suit, and the clock runs from discovery, not from when the violation occurred.¹⁵ If an agency slipped obsolete criminal records into a report three years ago and you only saw it last month, your two-year window starts last month. That rule matters because many people never see the reports used against them unless they ask for their files.

1
California Legislative Information. California Civil Code 1786.50
2
California Legislative Information. California Civil Code 1786.2
3
Justia Law. Connor v First Student Inc 2018 California Supreme Court
4
California Legislative Information. California Civil Code 1786.12
5
California Legislative Information. California Civil Code 1786.16
6
Federal Deposit Insurance Corporation. The Electronic Signatures in Global and National Commerce Act E-Sign Act
7
Justia Law. California Civil Code 1786.10
8
California Legislative Information. California Civil Code 1786.26
9
Justia Law. California Civil Code 1786.22
10
California Legislative Information. California Civil Code 1786.24
11
California Legislative Information. California Civil Code 1786.18
12
California Legislative Information. California Civil Code 1786.20
13
Federal Trade Commission. Fair Credit Reporting Act
14
Federal Trade Commission. Using Consumer Reports for Credit Decisions – What to Know About Adverse Action and Risk-Based Pricing Notices
15
California Legislative Information. California Civil Code 1786.52