A background check comes back with a conviction. Now what?
If the first instinct is to skip that candidate and move on, that reaction is common. It is also where employers walk into trouble. Blanket rules like "any felony means no hire" can trigger Title VII disparate impact claims, and the EEOC has been clear that criminal record exclusions can disproportionately affect candidates from certain demographic groups based on race and national origin (EEOC enforcement guidance).
The individualized assessment process gives employers a structured, defensible way to evaluate criminal history information without stalling the hiring process. This article covers what an individualized assessment is, when it applies, and how to build a repeatable workflow that connects to the Fair Credit Reporting Act adverse action process.
A note before going further. This article shares general information about employment screening compliance. It is not legal advice. Federal, state, and local rules vary. Talking with legal counsel is always a good idea when building or updating screening policies.
What is an Individualized Assessment?
An individualized assessment is a case-by-case review of a candidate's criminal history before making an employment decision based on that history. Instead of applying a blanket rule, the reviewer looks at the specific record, the specific job, and the specific person. The decision is the employer's, and the file is the employer's file.
The concept is straightforward. Where most HR teams get stuck is execution, partly because the EEOC does not spell out exactly how the individualized assessment process should work. The guidance explains what to consider but leaves the mechanics up to each employer.
Why Blanket Policies Create Risk
A policy that says "no felony convictions" might feel consistent. In practice, it creates two problems. First, the EEOC considers blanket exclusion policies a potential source of disparate impact discrimination. Candidates from protected demographic groups can be automatically excluded from the candidate pool without any connection to the duties of that role. Second, blanket rules break down on their own. Hiring managers start making quiet exceptions for candidates they like while enforcing the policy against others. That inconsistency is harder to defend than having no policy at all.
State and local fair chance laws have raised the stakes further. More than 37 states and over 150 cities and counties now restrict when and how employers can consider criminal history, and many require an individualized assessment as a condition of any adverse action based on a record. The KRESS State-by-State Compliance Guide covers the rules in plain language for each jurisdiction.
The EEOC's Three-Factor Standard
When criminal history information feeds into employment decisions, the EEOC expects employers to show that the exclusion is "job-related and consistent with business necessity." The agency points to three factors (EEOC background checks resource):
- Nature and gravity of the offense. What happened, and how serious was it?
- Time elapsed since the offense or completion of the sentence. How long ago did this occur?
- Nature of the job held or sought. Does the criminal conduct relate to the duties of the specific position?
These three factors are the backbone of every individualized assessment process.
A candidate with a recent fraud conviction applying for a role managing customer funds presents a clear nexus between the offense and role responsibilities. A candidate with an old, nonviolent drug possession charge applying for a warehouse position does not. The connection between the record and the particular position matters more than the record alone.
Arrests vs. Convictions
The EEOC advises against using arrest records alone as a basis for denying employment. An arrest is not proof of criminal conduct (EEOC enforcement guidance). Screening should focus on verified conviction records from primary sources. Human verification catches errors that automated database searches routinely miss.
A Step-by-Step Individualized Assessment Process
This is the part most teams need: a repeatable workflow that can be followed, documented, and handed to hiring managers.
Step 1: Notify the Candidate
Before making a decision to exclude someone, tell the candidate what criminal history information may affect the decision. Put the notice in writing, and use the same format across all roles and locations.
Step 2: Give a Real Chance to Respond
Set a reasonable response window. Five to seven business days is a common range. The point is to give the candidate a genuine opportunity to provide additional information relevant to the EEOC factors.
Candidates might share circumstances surrounding the offense, their age at the time, rehabilitation efforts such as education, training, or steady employment, character references, or participation in bonding programs.
Step 3: Document the Reasoning
Review the candidate's response against job duties and the three EEOC factors. Write a short justification connecting the record to the role, or explaining why the record does not warrant exclusion. This documentation protects the company if the hiring process ever faces a compliance audit. Going through the motions without genuine consideration still creates risk (Ogletree analysis).
How This Connects to the FCRA Adverse Action Process
The individualized assessment and the FCRA adverse action process serve different purposes, but both may apply to the same situation.
The individualized assessment addresses EEOC guidance and Title VII disparate impact risk. The FCRA pre-adverse action step is a separate legal requirement: when adverse action may be taken based on a consumer report, the candidate must receive a pre-adverse action notice, a copy of the report, and a summary of rights. For a walkthrough of how to send an adverse action notification properly, that guide covers the step-by-step requirements.
A combined workflow helps make sure nothing gets missed:
- Obtain candidate consent and provide required disclosures before screening.
- Run the background check through a Consumer Reporting Agency like KRESS.
- If potentially disqualifying criminal history information appears, begin the individualized assessment process: notice, opportunity to respond, documented review.
- If employment may be denied based on the consumer report, send the pre-adverse action letter with a copy of the report and a summary of rights.
- Wait the required period and review any disputes or additional information from the candidate.
- If the decision stands, send the final adverse action notice.
Always verify results before making a final decision.
Common Background Check Compliance Mistakes and How to Fix Them
Blanket exclusions. Replace automatic disqualification policies with role-based screening that ties each exclusion to the specific role and its compliance responsibilities. The 2018 Rooms To Go voluntary agreement with the EEOC is a useful reminder of what happens when blanket policies go unchecked (Ogletree analysis).
No documentation. Create a short form that captures the three EEOC factors, the job connection, and the final reasoning. A half-page form works.
Asking too early. Follow ban the box rules in each jurisdiction. Delay criminal history inquiries until after a conditional offer where local law requires it.
Inconsistent manager decisions. Centralize adjudication or require HR sign-off so the hiring process stays consistent across locations. Every reviewer should follow the same individualized assessment process before acting on criminal history information.
Letting an algorithm decide. Automated resume screeners, AI-assisted candidate ranking, and rules-based logic inside an ATS can functionally exclude applicants with criminal records before a human reviewer ever sees the file. When that happens, the employer has adopted a blanket policy without writing one down. KRESS covers how this interacts with FCRA obligations in When Does an AI Hiring Score Become a Consumer Report?.
How KRESS Supports the Individualized Assessment Process
The individualized assessment is the employer's responsibility, and it's only as strong as the information behind it. KRESS provides accurate, verified, primary-source reports so HR teams aren't making judgment calls based on incomplete or incorrect data. Our US-based specialists are available to clarify what a report contains or how a record was verified, but the employment decision always stays with you, where it belongs.
Most KRESS background checks complete in about one business day. Timing varies depending on court access and verification requirements, but KRESS sets clear expectations so HR teams are never left guessing. Less time chasing follow-ups means more time for the work that requires human judgment.
Frequently Asked Questions
Are individualized assessments required for criminal background checks?
The EEOC strongly recommends the individualized assessment process whenever criminal history information may lead to excluding a candidate. Many state and local fair chance laws now require it outright. Treating it as required is the safest and most defensible approach.
What are the three EEOC factors?
Nature and gravity of the offense, time elapsed since the offense or sentence completion, and the nature of the job held or sought. These come from the EEOC enforcement guidance.
What is the difference between an individualized assessment and FCRA pre-adverse action?
The individualized assessment evaluates whether a criminal record is job-related under EEOC guidance. The Fair Credit Reporting Act pre-adverse action step is a separate legal requirement to notify candidates and provide a copy of their consumer report before taking adverse action. Both may apply in the same situation.
Can an applicant be disqualified for any felony?
A blanket policy excluding all candidates with felony convictions, regardless of the particular position or circumstances, is exactly the kind of practice the EEOC warns against. A job-related reason connected to the specific role is needed.
How long should the response window be during an individualized assessment?
There is no single federal rule. Many employers allow five to seven business days. The key is that the window is reasonable and gives the candidate a genuine opportunity to provide additional information.
Want a screening process that holds up under scrutiny? Contact KRESS to discuss building a consistent individualized assessment workflow.