Maintenance
Social Media Screening in Hiring: What US Employers Must Document
A documentation guide for US employers running social media screening in hiring: FCRA notices, EEOC job related memos, retention tables, and policy files.
What to take away
- A third party social media screen is a consumer report, so the FCRA disclosure, written authorization, and notices must stay on file.
- The EEOC expects a documented, job related reason for every candidate you reject after a screen.
- Retention runs one year for Title VII applicant records and two years for ADEA records, with longer holds when a charge is filed.
- Keep screening records apart from the personnel file and limit access to trained reviewers.
- Publish the workplace social media policy before the first search and name the platforms you screen.
The FCRA paper trail for an employer social media background check
When an outside vendor assembles the profile, the employer social media background check becomes a consumer report under the FCRA. The FTC tells employers to use a clear, stand-alone disclosure and to get written permission before the search begins. FTC No liability waiver, state notice, or extra consent clause belongs on that page.
FCRA Screening File Contents
- Signed authorization
- Exact disclosure version
- Vendor name
- Report date
- Platforms checked
- Date window
- Live profile or saved copy
The file should hold the signed authorization, the exact disclosure version, the vendor name, and the report date. Add the search parameters: platforms checked, date window, and whether the reviewer saw a live profile or a saved copy. Those details answer a dispute months later.
Adverse action records and the two step notice
An FCRA social media screening result that drives a rejection starts the two step notice process. Send the pre adverse action letter with a copy of the report and the summary of rights. Give the applicant a reasonable chance to respond, often five business days.
Two Step Adverse Action Notice
- Screening result drives rejection
- Send pre adverse action letter
- Include report and summary of rights
- Give applicant five business days
- Log response window and reviewer
- Send final notice naming vendor
Log the response window, what the applicant submitted, and which person reviewed it. The final notice must name the vendor, state that the vendor did not make the decision, and go out once the review closes. The FCRA overview lays out those notice duties in sequence for training use.
Retention: how long to keep screening records
| Record | Typical hold | Basis |
|---|---|---|
| Signed disclosure and authorization | 1 year from the decision, longer if a charge is filed | 29 CFR 1602.14 |
| Pre adverse and adverse action letters | 1 to 2 years | FCRA and ADEA |
| Screen report and screenshots | Match the hiring file schedule | Company policy |
| Reviewer memo on a flagged post | Match the hiring file schedule | Internal policy |
Keep the set in one folder. When a legal hold arrives, freeze the whole folder instead of pulling single documents.
Screening Record Retention Periods
Record
- Signed disclosure and authorization
- 1 year from decision
- Pre adverse and adverse letters
- 1 to 2 years
- Screen report and screenshots
- Match hiring file
- Reviewer memo on flagged post
- Match hiring file
Typical hold
- Signed disclosure and authorization
- 29 CFR 1602.14
- Pre adverse and adverse letters
- FCRA and ADEA
- Screen report and screenshots
- Company policy
- Reviewer memo on flagged post
- Internal policy
Basis
- Signed disclosure and authorization
- Pre adverse and adverse letters
- Screen report and screenshots
- Reviewer memo on flagged post
A five step screen file checklist
- Issue the stand-alone disclosure and collect the signed authorization.
- Record the platforms, date window, and reviewer on the vendor request.
- Save the report and every screenshot under the request ID.
- Write a job related memo for each flagged post.
- Send the pre adverse and adverse notices with proof of the response window.
Documenting the job related reason
The EEOC background check guidance treats a blanket exclusion built on an online post as a discrimination risk. EEOC Write down the task, the requirement, and the link between the post and that requirement. If the link needs more than three sentences, the post is not a valid reason.
Example: a flagged post that does not disqualify
A candidate for a warehouse role posted about a prior employer's pay and safety conditions. The vendor report flags the post. The reviewer writes a short memo: date, reviewer name, post URL, and the job requirements list.
The memo states that the post is protected concerted activity under the National Labor Relations Act, so it cannot support a rejection. The candidate advances, and the memo plus the screenshot stay in the screening file.
Workplace social media policy and app rules for hiring
Some states, including Illinois and Maryland, limit requests for social media passwords. A written workplace social media policy that covers screening, access, and review steps keeps those limits visible to recruiters.
A blanket social media ban in the workplace is hard to defend, so narrow the rule to the roles and platforms you screen. For the limits on what you may ask and what candidates can refuse, read US employer policy and app rules.
Cross border hiring adds another layer. Quebec privacy law compared with US platform compliance shows the GDPR-like duties that platforms owe residents, the CAD fines under Law 25, and the breach reports those platforms must file.
Screening tools break when a platform changes its access terms. Review the platform terms and rules before you build a workflow that depends on them, because a contract the other side can rewrite shapes what your app rules for hiring can collect.
