There is a category of US employment litigation that has been quietly producing enormous settlement value for over a decade and continues to do so in 2026. It is not based on harassment, discrimination, wage-and-hour violations, or any of the substantive employment law areas that dominate headlines. It is based on a procedural requirement of the Fair Credit Reporting Act regarding how employers disclose their intent to run background checks.
The volume and value of settlements in this area would surprise most HR leaders. Barnes & Noble paid $600,000 over a single footnote. Delta Air Lines paid $2.3 million covering 44,000 applicants. Frito-Lay paid $2.4 million in a similar matter. Target paid $3.7 million. Quantum Global Technologies settled for $174,980 over a liability waiver. PeopleFacts settled for $2.4 million in early 2026 over notification timing. Employment Background Investigations, a Sterling subsidiary, paid $611,600. Postmates paid $2.5 million. Avis paid $2.7 million. The settlement aggregate across the FCRA disclosure litigation segment runs into the hundreds of millions over the past decade.
The cases share a remarkable feature: in most of them, the employer was not doing anything that would intuitively read as a violation. They were not running illegal background checks. They were not discriminating. They had obtained consent from the candidates. The violation was procedural — failure to comply with the FCRA’s specific requirement that the disclosure of intent to obtain a consumer report appear in a “document that consists solely of the disclosure.”
This blog examines why this specific procedural area has become so productive for plaintiffs’ attorneys, what the controlling case law actually says, and why so many employers — including sophisticated, well-advised ones — continue to operate non-compliant forms.
What the FCRA Stand-Alone Disclosure Requirement Says
The relevant statutory text is Section 604(b)(2)(A) of the Fair Credit Reporting Act, which requires that, before procuring a consumer report for employment purposes, the employer must provide:
“a clear and conspicuous disclosure…in writing to the consumer at any time before the report is procured…in a document that consists solely of the disclosure”
The phrase that matters is “consists solely of the disclosure.” The statute is explicit that the document containing the disclosure may not contain anything else — with one limited exception. The next sub-section permits combining the disclosure with the authorisation by the consumer for the report to be procured. So the disclosure can include authorisation language. It cannot include anything else.
That phrase — “consists solely” — is the foundation of every major FCRA disclosure class action of the past decade. Courts interpreting it have consistently found that adding extraneous content to the disclosure document violates the statute.
What counts as extraneous? The case law has developed a clear, if uncomfortable, picture:
State law information. Several states (California, New York, Minnesota, others) have their own disclosure requirements layered on top of the FCRA. Combining state-specific disclosure language with the federal FCRA disclosure in a single document has been found to violate the stand-alone requirement, because the state law content is not the federal disclosure.
Liability waivers. Disclosure forms that have included language requiring the candidate to waive liability for the employer or the consumer reporting agency have been found extraneous. Quantum Global Technologies settled for $174,980 over exactly this issue.
Legal advice disclaimers. A statement that the disclosure does not constitute legal advice has been found extraneous. Barnes & Noble’s $600,000 settlement was driven by a single footnote of this nature.
References to other policies. Pointers to company background check policies, equal opportunity statements, or other corporate documents have been found extraneous.
Translation provisions. Language stating that translations are available in other languages on request has been found extraneous in some cases.
Application form integration. Disclosures that appeared as part of an online job application — alongside other application content — rather than as a separate, distinct document have been found to violate the stand-alone requirement.
The pattern is consistent. Anything beyond the strictly necessary FCRA disclosure language and the candidate’s authorisation is potentially extraneous, and any extraneous content creates litigation exposure.
Why This Area Produces Class Actions Efficiently
Several structural features of FCRA disclosure litigation make it particularly attractive to plaintiffs’ attorneys.
Statutory damages. The FCRA provides for statutory damages of $100 to $1,000 per willful violation, plus attorneys’ fees and punitive damages. The statutory damage structure means plaintiffs do not need to prove individualised harm — the violation itself generates damages. For a plaintiff representing a class of 44,000 (as in Delta), even minimum statutory damages multiply quickly.
Class certifiability. FCRA disclosure violations are uniquely well-suited to class certification because the violation is the same for every applicant who received the same form. The form is uniform. The violation is uniform. The class is straightforward to define. Class certification challenges that would frustrate other employment claims fall away.
Willfulness as a single question. The FCRA distinguishes between willful violations (which trigger statutory damages) and merely negligent violations (which require actual damages). Plaintiffs’ attorneys structure cases around willfulness, and willfulness is a single question across the class. Either the employer’s process was willful or it wasn’t — there is no individualised inquiry.
Discovery is bounded. FCRA disclosure cases involve a bounded set of facts: what form was used, when it was used, who received it, what it said. The discovery is contained, the costs are predictable, and the timeline to settlement is reasonable.
The employer’s defence is constrained. The “we relied on counsel” defence is available but limited. The Walker v. Fred Meyer case demonstrated that even reliance on counsel does not automatically negate willfulness — the trial court initially accepted the defence, but the Ninth Circuit reversed, finding enough evidence of reckless disregard to send the case forward. After remand, the trial court ultimately ruled for the employer on willfulness, but the years of litigation costs were considerable.
The combined effect: FCRA disclosure cases are predictable, manageable, classifiable, and likely to produce settlement value. Plaintiffs’ attorneys have responded to the structural incentives. The class action industry has formed.
The Walker, Gilberg, and Hebert Trio
For employers seeking to understand what the controlling law actually requires, three cases dominate the landscape.
Gilberg v. California Check Cashing Stores, LLC (Ninth Circuit, 2019). Established that combining the federal FCRA disclosure with state-specific disclosure requirements in a single document violated the stand-alone requirement. This decision essentially closed off the common practice of using a unified national form across multi-state employers. Each state’s disclosure requirements must be handled in a separate document.
Walker v. Fred Meyer, Inc. (Ninth Circuit, 2020). Held that the disclosure could include certain limited information beyond the bare statutory disclosure if it was directly related to the FCRA’s purpose, but that information about candidate rights to inspect background check company files was extraneous because it could distract from the privacy rights protected by the FCRA itself. The decision narrowed even further what was permissible.
Hebert v. Barnes & Noble, Inc. The case driven by a single footnote stating the disclosure was “not legal advice.” The trial court initially dismissed the case on willfulness grounds. The Ninth Circuit reversed, finding sufficient evidence that the inclusion was reckless. The case settled for $600,000.
These cases are Ninth Circuit decisions, technically binding only in that circuit. But because the Ninth Circuit covers California — and California is where many of the largest national employers run their operations — the practical effect is that any national employer with significant California operations is operating under Ninth Circuit standards. Other circuits have generally followed similar reasoning.
Other notable cases — Syed v. M-I, LLC, also Ninth Circuit, established that the willfulness question can be decided on summary judgement against the employer where the violation is plain on the face of the form. This decision lowered the threshold for plaintiffs to defeat employer defences.
What “Willful” Means in Practice
The willfulness question is central to FCRA exposure. Negligent violations require actual damages — typically modest. Willful violations attract statutory damages, attorneys’ fees, and punitive damages.
The Supreme Court’s decision in Safeco Insurance Co. v. Burr (2007) established that “willful” under the FCRA means either knowing or reckless. Reckless, in turn, means that the conduct entailed an “objectively unreasonable” interpretation of the FCRA’s requirements.
In practice, courts have found willfulness where:
- The employer used a form for an extended period without legal review against current case law
- The form included content that any reasonable interpretation of “consists solely of the disclosure” would exclude
- The employer continued using non-compliant forms after being advised of compliance issues
- The form was clearly inconsistent with controlling authority in the relevant jurisdiction
The implication for employers: simply not having reviewed the form does not protect against willfulness findings. Reckless disregard can be inferred from the absence of review combined with content that should have been identifiable as problematic.
Why Sophisticated Employers Still Get Caught
A reasonable question is: why, given the volume and value of these settlements, do well-advised employers continue to use non-compliant forms?
Several factors recur in the cases.
Inherited forms. Many employers operate forms that were drafted years ago, often by prior counsel or by HR vendors, and have not been refreshed against developing case law. The forms become institutional infrastructure that nobody is responsible for reviewing.
Vendor-provided forms. Employers using third-party background check vendors often use disclosure forms supplied by the vendor. These forms vary in quality. Some include vendor protective language (the “not legal advice” disclaimer is typical of this) that the employer accepts without scrutiny. The employer remains responsible for the form regardless of who drafted it.
Online application integration. As job applications have moved online, disclosure forms have often been integrated into application flows in ways that do not maintain the stand-alone character. The disclosure appears as a screen alongside other application content. The line between “stand-alone document” and “part of the application” becomes unclear.
State-specific complexity. Multi-state employers face genuine complexity in maintaining compliant forms across multiple jurisdictions with different requirements. The temptation to consolidate into a single national form is strong; the post-Gilberg risk of doing so is high.
Risk underestimation. Even where forms are reviewed, the perceived risk of these technical violations is often understated. The settlement values in this area are not as widely tracked as discrimination or harassment settlements, and HR teams often do not have a current picture of what FCRA disclosure litigation actually costs.
The 2026 Picture: Why This Continues
For employers wondering whether the FCRA class action wave is finally subsiding, the data suggests it is not. The PeopleFacts $2.4 million settlement received final approval in February 2026. The settlement landscape continues to populate with new cases. Plaintiffs’ attorneys have not concluded that this area has been mined out.
The reasons are structural. The compliance landscape continues to evolve — case law develops, state laws change, online application infrastructure changes — and forms that were compliant three years ago may be non-compliant today. Each evolution creates a new pool of potentially affected applicants. Each new pool is a potential class.
The implication for employers in 2026 is straightforward. The compliance question is not whether your forms were reviewed at some point in the past. It is whether they have been reviewed against current case law within a defensible recency window. The answer for most organisations is that they have not. The exposure that creates is real, current, and growing.
AMS Inform provides background verification and workforce screening services across 160+ countries. For organisations reviewing their FCRA compliance frameworks, speak to our team at AMSinform.com.
