Employer responsibilities
What an organization using HVR reports is responsible for.
LAST UPDATED 27 AUG 2026 · VERSION 0.9 DRAFT
Draft — requires review by qualified counsel
01Permissible purpose
Have and certify a permissible purpose for every report you order.
02Disclosure and authorization
Provide a clear disclosure and obtain authorization before obtaining a report.
03Use limits
Use reports only for the purpose certified, and limit internal access to people who need it.
04Adverse action
Follow the required pre-adverse and adverse-action process, including providing a copy of the report and the rights summary.
05Consider corrections
Where a dispute produces a corrected report version, consider the corrected version.
06State and local law
Comply with additional jurisdiction requirements, including limits on what may be considered and additional notices.
07Retention and disposal
Follow your retention schedule and dispose of report information securely.