Background Check Companies Don't Have to Follow Court Orders — But They Do Have to Follow This Law

Here is something almost no one tells you when you get your record expunged: the court order you just received does not legally bind the companies most likely to flag your record.

A judge signed an order. The court sealed the file. The state updated its records. Everything that was supposed to happen inside the legal system happened. But the company that provided the background check report to your prospective employer? They are not a court. They do not operate under your state's expungement statute. They are a private business, and your expungement order is not legally enforceable against them the way it is against government agencies.

This feels like a loophole. It is not a loophole — it is a structural reality of how private data markets work. But there is a different law, a federal law with real enforcement mechanisms, that does apply to these companies. Understanding it is how you actually exercise your rights.

Why Expungement Does Not Bind Private Companies

State expungement statutes are laws about government records. They direct courts, law enforcement agencies, and state repositories to seal, destroy, or stop reporting records. They are written to apply to government actors — the agencies that created and maintain official records.

Private background check companies are not government agencies. They operate databases built from their own scraping of public records — records that were public when they were scraped. The fact that a court later sealed the source record does not automatically reach into a private company's historical database and delete the copy they made.

Some states have tried to close this gap. A handful have amended their expungement statutes to explicitly cover private consumer reporting agencies, requiring them to update records when notified of an expungement. But this is not universal, and enforcement is inconsistent.

The more reliable and more widely applicable legal framework is federal, not state. It is the FCRA.

What the FCRA Is and Why It Applies

The Fair Credit Reporting Act was enacted by Congress in 1970 and has been amended several times since. It was designed to regulate a specific industry: companies that compile consumer information and sell it to third parties who use it to make decisions about consumers.

That description precisely fits background check companies. When an employer hires a background check company to run a report on a job applicant, that transaction is regulated by the FCRA. The background check company is a "consumer reporting agency." The report it produces is a "consumer report." The employer is a "user" of the report.

All three parties — the CRA, the employer, and you — have obligations and rights under the FCRA. The ones that matter most for disputing arrest records belong to you.

The Specific Rights That Apply to Arrest Records

The FCRA creates several distinct rights that are directly relevant to people dealing with arrest records in background checks.

The 30-Day Investigation Window in Practice

The 30-day investigation requirement is the most powerful practical tool you have. Here is how it works.

You submit a dispute to the background check company. The clock starts when they receive it. Within 30 days, they must:

1. Investigate the disputed item by checking the source of the information
2. Contact any third party that provided the data (e.g., a court record vendor)
3. Determine whether the information can be verified as accurate
4. Notify you of the outcome in writing
5. If inaccurate or unverifiable: delete or correct the item
6. If deleted: notify anyone they sent the report to in the past two years

The key phrase is "unverifiable." If the company cannot confirm that the information is accurate — for example, if the source record was expunged and the court system no longer provides the data — they cannot report it. They must delete it.

This is significant. You do not have to prove the company was wrong. The burden shifts to them to prove they can verify the accuracy of what they are reporting. For expunged records that are no longer in official databases, that verification may be impossible.

What Happens When Companies Do Not Comply

The FCRA has teeth. This is not a law with no enforcement mechanism. Companies that violate it face real liability.

Consumer protection attorneys frequently take FCRA cases on contingency — meaning they get paid out of any recovery, not from you upfront. This exists precisely because Congress wanted to make it economically viable for individuals to enforce their rights against large companies.

Using This in Practice

This is not theoretical. The FCRA dispute process is used successfully by people every day to remove outdated, inaccurate, or impermissible arrest records from background check company databases.

The practical steps are not complicated, but they do require effort:

1. Identify which company ran the background check. Employers must tell you if they take adverse action based on a report. Ask for the company's name and contact information in writing.
2. Get a copy of the report. You have the right to request a free copy from the CRA. Review it for inaccurate or outdated items.
3. Write a dispute letter. Identify the specific item, explain why it is inaccurate or impermissible, and attach documentation (your court disposition, expungement order if you have one).
4. Send it certified mail. Keep proof of receipt. Note the date — the 30-day clock starts when they receive it.
5. Follow up at 30 days. If you have not received a response, send a follow-up citing the statutory deadline.
6. If they ignore it or refuse to correct an error: Consult a consumer protection attorney or file a complaint with the CFPB at consumerfinance.gov/complaint.

The Scope of the Problem

One FCRA dispute with one company is manageable. The challenge is that your record may be in the databases of more than 100 background check companies. Each one is a separate legal entity. Each one requires its own dispute. Each one has its own 30-day clock.

Many people who understand the FCRA well choose to send dispute letters to a broad range of companies proactively — not just the one that ran the check on them — to reduce the number of companies actively reporting old records. This is a legitimate and effective strategy.

The main obstacle is the time and organization required. Writing individualized letters, tracking responses, and following up takes real hours. People who do it manually typically budget 20 to 40 hours.

Background check companies are not subject to your expungement order. That is the uncomfortable truth. But they are subject to a federal law that gives you real rights, real enforcement mechanisms, and a 30-day deadline that shifts the burden to them. The legal leverage exists. What it requires is using it.