Investigative Consumer Reporting Agencies Act
ICRAA
Credit reporting · Employees
Regulates background reports on a person's character, reputation, and way of living, often used for employment and tenant screening. Agencies must limit reports to permitted purposes, maintain accuracy, and disclose on their websites whether personal information is sent outside the United States.
- Where
- California
- Citation
- Cal. Civ. Code 1786-1786.60
- Status
- In force
- Last amended
- 2011-01-01
- Enforced by
- Private plaintiffs
- People can sue
- Yes
- Penalties
- Greater of actual damages or $10,000 per violation (not in class actions), plus costs and attorney's fees; punitive damages for grossly negligent or willful violations (1786.50).
- Applies to
- Investigative consumer reporting agencies (background check companies) and users of investigative consumer reports, including employers and landlords
What a privacy notice must say
- Post a privacy policy stating whether personal information will be transferred outside the United States, with contact information.Cal. Civ. Code 1786.20(d)
Practices it requires
- Maintain reasonable procedures to limit reports to permitted purposes and obtain user certifications.Cal. Civ. Code 1786.20(a)
- Follow reasonable procedures to assure maximum possible accuracy.Cal. Civ. Code 1786.20(b)
Sources
Checked against these sources on 2026-09-25 by research agent (Claude), primary sources.
Unverified: Enactment date and notice/authorization duties for employer users (1786.16) not fetched.
Research reference, not legal advice.