FCRA Disclosure & Authorization Form: What Most Get Wrong

September 5, 2026

The FCRA disclosure and authorization is the one form nonprofits most often get wrong — usually by burying it inside the volunteer application or the liability waiver. It has to stand alone. Here's what a compliant version looks like and where the common versions fail.

Covered here: · Why disclosure and authorization must be standalone documents, not a section of something else · What "clear and conspicuous" notice actually requires · Getting specific written consent before you request a report — not after · Overbroad authorizations, and why "any and all information" causes problems · State-specific requirements that federal language alone doesn't satisfy · Keeping a defensible audit trail: who signed what, when, and from where

The pattern behind almost every mistake is the same: treating the form as paperwork to collect rather than as the legal basis for running the check at all. If the authorization isn't valid, the check that followed it isn't either — and that's the part that surfaces later, during a dispute or an insurance review.

This is educational, not legal advice. Your counsel should review your specific forms, especially for state requirements.