Iowa’s background check laws for employment come from three layers that don’t line up neatly: state rules on how criminal history data is released, a handful of city ordinances restricting when employers can ask about criminal records, and the federal Fair Credit Reporting Act, which governs any check run through a third-party screening company. There is no single statute an Iowa employer can read to be compliant. What follows walks through each layer in the order it actually affects a hire.
When Employers Can Ask About Criminal History
Iowa has no statewide ban-the-box law for private employers. Outside a few cities, you can ask about criminal history at any point in the hiring process, including on the initial application.
Two local ordinances change that. Waterloo bars all employers from including criminal history questions on a job application and prohibits employers with 15 or more workers from making any criminal history inquiry until after a conditional job offer has been extended.1Iowa Legislature. Legal Update – Legality of Ban the Box Ordinance Des Moines has a similar rule: employers cannot ask about convictions, arrests, or pending charges from an applicant’s first inquiry through the conditional offer stage.
If you hire in either city, application forms and interview scripts need to reflect the local timing rules even if your headquarters sits elsewhere in the state.
How Employers Can Use Criminal Record Information
Being allowed to ask is not the same as being allowed to act. Federal law still limits how the answers get used.
The EEOC’s enforcement guidance treats a blanket policy of rejecting anyone with a criminal record as potentially unlawful under Title VII if the policy disproportionately excludes people of a particular race or national origin and isn’t tied to a legitimate business need.2U.S. Equal Employment Opportunity Commission. Enforcement Guidance on the Consideration of Arrest and Conviction Records in Employment Decisions Employers are expected to evaluate applicants individually, weighing the nature of the offense, how long ago it happened, and whether it relates to the job in question.
Arrests deserve separate treatment. An arrest without a conviction is not evidence of wrongdoing, and the EEOC has long held that excluding applicants based only on arrests is not job-related or consistent with business necessity.3U.S. Equal Employment Opportunity Commission. Questions and Answers About the EEOC’s Enforcement Guidance on the Consideration of Arrest and Conviction Records in Employment Decisions Under Title VII You can look into the underlying conduct behind an arrest, but the arrest by itself should not be the deciding factor.
What Iowa’s Criminal History Records Show
The Iowa Division of Criminal Investigation maintains the state’s criminal history repository. Anyone can request a name-based check for $15 per last name, and no signed release from the subject is required for a basic request.4Iowa Department of Public Safety. Criminal History Record Check Information What comes back, though, depends on whether the applicant has signed an authorization.
Without a signed release, the DCI holds back two categories of information: arrests older than 18 months that have no final disposition, and completed deferred judgments.4Iowa Department of Public Safety. Criminal History Record Check Information A signed authorization unlocks both. Every DCI release must also carry the statement: “An arrest without disposition is not an indication of guilt.”5Iowa Legislature. Iowa Code Chapter 692 – Criminal History and Intelligence Data Juvenile records are confidential and cannot be included, signed release or not.
A DCI check pulled without a release is therefore narrower than what a private consumer reporting agency might assemble from court records. That is by design. The withheld categories exist so that stale unresolved arrests and successfully completed deferred judgments do not follow people forever.
FCRA Requirements When Using a Third-Party Screening Company
Most Iowa employers do not run their own DCI checks. They hire a consumer reporting agency, and once they do, the federal Fair Credit Reporting Act governs the process.
Before ordering a report, the employer must give the applicant a standalone written disclosure that a background report may be obtained, and must get the applicant’s written authorization.6Office of the Law Revision Counsel. 15 USC 1681b – Permissible Purposes of Consumer Reports The disclosure has to appear in a document that contains nothing else. Burying it inside the general application is one of the most litigated FCRA mistakes.
If the employer then decides not to hire someone based in whole or in part on what the report showed, a two-step adverse action process applies. First comes a pre-adverse-action notice: the employer sends the applicant a copy of the report and a written summary of their FCRA rights before finalizing the decision.6Office of the Law Revision Counsel. 15 USC 1681b – Permissible Purposes of Consumer Reports That gives the applicant a window to dispute errors. Only after a reasonable period can the employer issue the final adverse action notice. Skipping the pre-adverse step is one of the most common FCRA violations employers commit.
What Consumer Reports Can and Cannot Include
Consumer reporting agencies cannot include arrest records older than seven years if the arrest did not lead to a conviction. The same seven-year cutoff applies to civil judgments and most other adverse information. Convictions can be reported indefinitely. For positions paying $75,000 or more per year, the time limits drop away entirely and older adverse information can be reported.7Office of the Law Revision Counsel. 15 USC 1681c – Requirements Relating to Information Contained in Consumer Reports
Any applicant who finds errors in a report has the right to dispute the information directly with the reporting agency. The agency must reinvestigate within 30 days and correct or delete the item if it turns out to be inaccurate. The 30-day window can be extended by 15 days if the consumer supplies additional relevant information mid-investigation.8Office of the Law Revision Counsel. 15 USC 1681i – Procedure in Case of Disputed Accuracy If a correction is made, the agency must notify anyone who recently received the inaccurate version.
One boundary worth noting: an Iowa applicant can seek expungement of certain records, but expungement is a court process that runs on its own timelines and does not remove information the employer has already lawfully obtained.
Applicant Privacy Protections
Iowa prohibits employers from requiring job applicants to hand over personal social media login credentials as a condition of hiring. That covers usernames, passwords, and other authentication information for personal social networking accounts. Asking to be shown around an account during an interview or making access a condition of employment is off-limits.
Penalties for Getting It Wrong
Iowa treats misuse of criminal history data seriously. Anyone who obtains criminal history data under false pretenses, communicates it to unauthorized recipients, or falsifies records tied to an authorized research program commits an aggravated misdemeanor. That carries up to two years in prison and a fine between $855 and $8,540.9Iowa Legislature. Iowa Code 692.7 – Criminal Penalties10Iowa Legislature. Iowa Code Chapter 903 – Penalties That is a heavier consequence than most people expect for what can look like a paperwork problem.
FCRA violations produce civil exposure rather than criminal charges. An applicant whose rights were violated can sue for actual damages or statutory damages between $100 and $1,000 per violation, plus attorney’s fees. Willful violations can also trigger punitive damages. The Consumer Financial Protection Bureau oversees FCRA compliance at the federal level and can bring its own enforcement actions independently of any private suit.