FCRA applies regardless of contractor classification
The Fair Credit Reporting Act governs any consumer report used to make a decision about hiring, contracting, or engaging a worker. The statute does not distinguish between employees and contractors. A gig platform running a background check on a rideshare driver, delivery driver, or on-demand worker uses a consumer report; FCRA rules apply.
The core FCRA requirements: written disclosure separate from the contract, written authorization from the worker, accurate reporting standards on the CRA, and the two-step adverse-action workflow (pre-adverse notice with a copy of the report plus FCRA Summary of Rights, a waiting period to allow dispute, then the final adverse-action notice). The state-level Investigative Consumer Reporting Agencies Acts (California ICRAA, Massachusetts and others) layer additional disclosure on top.
The 2026 enforcement reality: CFPB and FTC have brought FCRA actions against gig platforms and their CRAs, with multi-million-dollar settlements for systemic disclosure failures or improper adverse-action handling. The bar is procedural, not aspirational.
The standard gig background-check stack
- Identity verification. SSN trace, address history, AKA names. Establishes the worker is who they claim and locates the jurisdictions to search.
- National criminal database search. Aggregated national CRA databases (operated by Checkr, Sterling, HireRight, Accurate). Hits trigger county-level confirmation.
- State and county criminal searches. Specific jurisdictions based on address history; required by some state rideshare statutes.
- Sex offender registry. NSOPW (federal) plus state registries.
- Motor vehicle record (MVR). State DMV record showing license status, traffic violations, suspensions. Required for any role involving driving.
- Driver license verification. AAMVA-format check plus state DMV confirmation of current validity.
- Sanctions and watchlist screening. OFAC, FBI watchlists, terrorism screening.
- Vehicle verification. For rideshare and delivery: vehicle year/make/model match against state registration; insurance verification.
The full stack typically completes in 24 to 72 hours through major CRAs. Background-check vendors covered in our vendor comparison are the operational backbone.
Continuous monitoring: the gig-economy default
Continuous criminal monitoring re-screens workers on an ongoing basis after onboarding. The pattern was pioneered by Uber in response to safety incidents and is now standard at major gig platforms.
- Daily or weekly automated re-pings against national criminal databases.
- Real-time MVR alerts (license suspension, new violations) where state DMV connections allow.
- Worker-facing process: when a new record appears, the worker is offboarded pending review and dispute.
FCRA implications: the continuous-check consent must be explicit at onboarding (not buried in a general consent) and is typically renewable on a defined cycle. Workers who decline continuous monitoring can be excluded from the platform under FCRA, but the disclosure rules require the option be visible. The adverse-action workflow applies when a continuous check produces a new disqualifying record.
FCRA does not care that the worker is a contractor. The consumer-report rules govern any decision based on the report.
State-level rideshare and delivery rules
Most US states with significant rideshare activity have specific transportation network company (TNC) statutes. The common elements:
- 7-year national criminal search at minimum.
- Sex offender registry check.
- MVR review with state-defined disqualification standards.
- Disqualification standards. DUI within a defined window (often 7 years), violent felony within a window, sex offences typically lifetime disqualifier, certain driving violations within shorter windows.
- Re-check cadence. Many states require platforms to re-run the full check on a defined cycle (annual to triennial); continuous monitoring satisfies the spirit but state implementations vary.
For delivery-only platforms (no passenger transport), the rules are typically lighter but still apply. For home-services platforms (TaskRabbit, Handy, Care.com), the standards depend on the service category; child care and elder care add state-specific protected-population rules.
Where forensic AI does the unit-economics work
Gig platforms onboard at high volume. Major rideshare and delivery platforms onboard hundreds of thousands of new workers per month at peak. The economics work only when the per-onboarding compliance cost stays low. Forensic AI on document intake is the lever:
- Catch Photoshopped and AI-generated IDs, driver licenses, and insurance cards at upload, before the platform pays for a full background check on a fraudulent applicant.
- Verify vehicle registration documents (a known fraud surface; workers occasionally drive under a friend or family member's registered vehicle without authorization).
- Catch insurance card forgery (state-required minimum coverage often falls short of platform requirements; some workers forge upgraded coverage).
- Flag inconsistencies between uploaded documents and identity-verification data before the FCRA-bound CRA workflow.
Unit cost matters. A forensic AI check at cents per document keeps the total compliance cost manageable across millions of onboardings.
Frequently asked questions
Does Proposition 22 change background-check rules in California?
No. Prop 22 (2020, with subsequent litigation) addresses the classification of app-based drivers as contractors versus employees and provides specific benefits. It does not change FCRA application or state TNC background-check rules.
What about Uber and Lyft specifically?
Both run extensive background checks with continuous monitoring through Checkr (Uber's primary CRA) and similar vendors. Both have been subject to FCRA enforcement actions historically and have refined their processes substantially. Both publish detailed background-check standards in their driver-onboarding documentation.
Are international gig platforms different?
UK and EU platforms operate under different rules: UK DBS check (basic, standard, enhanced) and EU member-state-specific criminal-record requests. The GDPR data-handling rules add their own layer on top.
What rights does a gig worker have if a check is wrong?
FCRA dispute rights apply. The worker can dispute inaccurate information with the CRA; the CRA must investigate within 30 days. If the platform's adverse-action decision was based on inaccurate data, the worker can seek correction and potentially restoration to the platform. FCRA private right of action allows litigation for willful violations.
What is the right escalation path for a flagged worker?
FCRA pre-adverse-action notice, then a defined waiting period (typically 5 to 10 business days), then final adverse-action notice if the disqualifying information stands. The worker can dispute during the waiting period; the platform must consider the dispute before final action. Continuous monitoring uses the same workflow when a new record appears.