What Are FCRA Adverse-Action Rules When You Deny a Tenant — and Does AI Screening Change Them?

You ran the screening report. The applicant doesn't qualify. You click "deny" — and at that instant a federal statute and a clock start running. Most property managers think a denial is just saying no. It isn't.

Short answer: when you deny an applicant — or charge them more — based even partly on a screening report, the FCRA requires you to send an adverse-action notice with the consumer reporting agency's contact details, a statement that the agency didn't make the decision, and the applicant's dispute and free-report rights. Using AI to screen doesn't change that duty: the notice is still yours to send.

This is general information, not legal advice — statutory specifics and timing vary by state; consult counsel for your situation.

What counts as an "adverse action" in tenant screening under the FCRA?

Here is the scope trap most property managers fall into: adverse action is not just an outright denial. The obligation triggers any time a consumer report influenced a decision that left the applicant worse off than others — which covers more situations than most landlords realize.

The FTC's guidance for landlords is explicit on this: if you reject an applicant, increase the rent or deposit, require a co-signer, or take any other unfavorable action based partly or completely on a consumer report, you must give that applicant a notice of that fact. Each of the following, when based on a consumer report, independently triggers the obligation:

• Denying the application outright
• Requiring a co-signer or guarantor
• Demanding a larger security deposit than other applicants receive
• Charging higher rent than you would charge a comparable applicant
• Imposing additional conditions tied to what the report showed

The operative phrase is "based in whole or in part." The report doesn't have to be the only reason — if it was a factor at all and the applicant got a worse outcome, the obligation is on. So if your process flags a co-signer requirement for applicants below a certain credit score, that co-signer condition is itself an adverse action, and it needs the notice just as much as a flat denial does. (FTC — Using Consumer Reports: What Landlords Need to Know)

What must a tenant adverse-action notice include under the FCRA?

Section 615(a) of the FCRA (15 U.S.C. § 1681m) requires three core things in the notice. The FTC's landlord guidance states them plainly — copy them into your denial-letter template:

1. The name, address, and phone number of the consumer reporting agency (CRA) that supplied the report. The applicant needs enough information to contact them directly; where the CRA is a nationwide agency, note that too.
2. A statement that the CRA did not make the decision and can't explain why it was made. Applicants often assume the screening company denied them and go dispute it with them. The notice must make clear the decision was yours — the CRA can only address the accuracy of the data, not reverse your call.
3. Notice of the applicant's right to dispute the information and to get a free copy of the report. The applicant can dispute the accuracy or completeness of anything the CRA furnished, directly with the CRA, and can request a free copy of the report from that CRA within 60 days of the notice. The 60-day window runs from the notice, not from when the report was originally pulled.

Make the report's role clear, too. A vague "your application was not approved" that never references the report can leave the applicant unaware that a consumer report drove the decision — which defeats the dispute right the notice exists to protect. State that a consumer report was a factor.

On form: the statute allows written, oral, or electronic delivery, but written is the defensible record. The FTC and federal housing agencies have specifically encouraged housing providers to use written notices. If the question ever becomes "did you tell this applicant correctly," a sent email or delivered letter with a timestamp gives you something to point to. Oral notice creates a proof problem.

On timing: the FCRA does not fix one universal deadline for sending the notice — the practical rule is to send it promptly, contemporaneously with the denial decision. Several states layer their own timing requirements on top of the federal standard. Check your state law and consult counsel on what applies where you operate.

One more layer: a credit score in the decision adds a few items

If you used a credit score in the adverse-action decision — not just the report — the FTC guidance adds a short list to the notice: the score itself, the source and date of the score and the range of possible scores under that model, and the key factors that adversely affected it, listed in order of importance. If you denied on the report's contents rather than a numeric score, the three core elements above are the spine of a compliant notice.

Does using AI or an algorithm to screen tenants change my FCRA adverse-action obligations?

No. AI or algorithmic screening does not change your FCRA or Fair Housing obligations — it raises the cost of getting them wrong. The duty to send the adverse-action notice still sits with you, the housing provider, not with the tool.

On May 2, 2024, HUD's Office of Fair Housing and Equal Opportunity issued formal guidance confirming that the Fair Housing Act applies in full to tenant screening that uses AI, machine-learning models, and algorithmic decision tools — any automated system that takes in applicant data and produces a recommendation or decision on the housing provider's behalf. (HUD FHEO Guidance on Screening of Applicants for Rental Housing, May 2, 2024)

The liability point most property managers get wrong: when a screening tool — AI or otherwise — produces a result, the housing provider stays responsible for that result. HUD's guidance is explicit that you remain liable for a discriminatory outcome, including a disparate-impact result, even when screening is fully outsourced to a third-party vendor or driven by an algorithm you didn't design. The technology does not absorb the legal exposure. And the adverse-action notice itself is non-delegable in the same way:

• An AI recommendation is still a decision based on a consumer report. If the tool pulled or incorporated credit, criminal, or eviction data and the applicant received adverse terms, the FCRA notice still fires — regardless of who or what generated the recommendation.
• Know what your screening tool is actually doing. If a vendor runs a model against each applicant and produces a pass/fail recommendation, that model's outputs are your decision, and you answer for what they do across your applicant pool at scale.
• Scale amplifies errors. A systematic gap in a manual process might affect a handful of applicants a month; the same gap baked into an automated tool affects every applicant it touches.

The honest frame is not alarmist: AI makes leasing faster and surfaces signals a manual review might miss. What it does not do is lower the compliance bar — so the more automated your leasing operation becomes, the more it matters that the legally significant steps still run through your process correctly.

FCRA vs. the Fair Housing Act: two laws apply at the same moment

When you deny a tenant based on a screening report, two separate federal laws apply at exactly the same moment — and satisfying one does not satisfy the other. This is where the real compliance complexity lives.

The distinction matters in practice. A property manager who sends a technically perfect FCRA notice but applies a blanket ban on any prior eviction — regardless of age, circumstances, or recency — may still face a Fair Housing Act claim if that policy disproportionately excludes a protected class. The FCRA side is flawless on paper; the FHA exposure is real. The reverse holds too: carefully neutral screening criteria won't help you if the applicant never received the required FCRA notice. The two laws are parallel tracks, not alternatives.

This page covers the FCRA denial procedure. For the criteria side — how to design screening policies that hold up under the FHA's disparate-impact standard — see our guide on tenant screening requirements. And for how AI changes the Fair Housing analysis of your screening logic, see our piece on AI leasing and fair-housing steering liability.

What are the penalties for getting a tenant adverse-action notice wrong?

The FCRA's penalty structure runs on two tracks, and the attorney's-fees provision is what makes these cases worth bringing even when per-applicant damages look small.

Willful noncompliance under 15 U.S.C. § 1681n: statutory damages of not less than $100 and not more than $1,000 per violation, plus actual damages, possible punitive damages, and the consumer's attorney's fees and costs. Courts read "willful" broadly — it includes reckless disregard for the law, not just intentional violations. A policy of never sending adverse-action notices is reckless disregard.

Negligent noncompliance under 15 U.S.C. § 1681o: actual damages plus attorney's fees, with no statutory-damages floor. The fees still attach — which is the exposure that makes small claims viable for plaintiffs.

Per-applicant exposure adds up fast. A property manager handling 40 applications a month who routinely skips the notice for denied applicants doesn't face one violation — they face one for each denial. And because the fees provision removes the economic barrier, a plaintiff's attorney can take the case on contingency even when the statutory damages per applicant are modest.

Can leasing automation safely qualify applicants without taking on the legal denial decision?

Yes — if the tool and your process are designed around the right division of responsibility. The compliance-safe pattern comes down to one boundary: what the technology handles and what your process must own.

A well-designed leasing automation setup should:

• Qualify and route applicants on neutral, applicant-stated criteria — income band, move-in date, pet situation, Section 8 or voucher acceptance — before any consumer report is pulled. This is top-of-funnel speed work, and it has no FCRA implications because no consumer report is involved at this stage.
• Handle repetitive inquiry responses, availability confirmation, and showing scheduling without requiring a leasing agent to field each one manually at 11pm.
• Surface qualified prospects to your team so the human review and the screening step happen faster — not instead of the leasing team.

A well-designed leasing automation setup should not:

• Make the accept/deny decision. That is the legally significant step the FCRA notice obligation attaches to.
• Generate or send the adverse-action notice automatically — because the notice must accurately reflect the decision your process made, the CRA that provided the report, and the rights available to that applicant.
• Pull or act on credit, eviction, or criminal consumer reports autonomously, without your team's review of what the report says and the decision that follows.

The principle is straightforward: automation speeds the funnel; your process owns the legally significant decision. The FCRA notice, the fair-housing criteria review, and the final accept/deny call belong to your compliant process, not to any tool. Software that claims to take those steps entirely off your plate — without your review — is taking on legal risk you haven't accounted for and handing it back to you as exposure you can't see.

Frequently asked questions

What is an FCRA adverse-action notice?

A notice you must give an applicant when you deny them — or impose worse terms, like a larger deposit or higher rent — based even partly on a consumer report. Under 15 U.S.C. § 1681m it must include the CRA's contact details, a statement that the CRA didn't make the decision, and the applicant's dispute and free-report rights, delivered promptly with the decision.

Is requiring a co-signer or a bigger deposit an "adverse action"?

Yes. If a co-signer requirement, a larger security deposit, or higher rent is based in whole or in part on a consumer report, each independently triggers the FCRA adverse-action notice obligation.

What must the adverse-action notice include?

Per FTC guidance for landlords: the CRA's name, address, and phone number; a statement that the CRA did not make the decision and can't explain it; and the applicant's right to dispute the report's accuracy with the CRA and to request a free copy of it within 60 days. If a credit score drove the decision, the notice must also disclose the score, its source and range, and the key factors that affected it.

How long do I have to send the adverse-action notice?

The FCRA does not set one universal federal deadline — the safe practice is to send it promptly with the denial decision. Several states add their own timing requirements on top of the federal standard, so check your state law.

What can the applicant do after they receive the notice?

Dispute the accuracy or completeness of any information directly with the CRA, and request a free copy of the report from that CRA within 60 days of receiving the notice.

Does using AI to screen tenants change my FCRA or Fair Housing obligations?

No. HUD's May 2024 guidance confirms both laws apply fully to AI and algorithmic screening tools. AI raises the cost and scale of mistakes — it does not move the compliance bar, and the adverse-action notice remains the housing provider's duty to send.

If a third-party or AI tool produces a discriminatory result, who is liable?

The housing provider. HUD's 2024 guidance is explicit that you remain liable for a discriminatory outcome — including disparate-impact results — even when screening is fully outsourced to a vendor or driven by an algorithm you didn't design.

What's the difference between the FCRA and the Fair Housing Act at the denial step?

The FCRA governs the notice and procedure — did you tell the applicant correctly? The Fair Housing Act governs whether your screening criteria discriminate across protected classes. You can satisfy one and still violate the other; they operate in parallel at the same decision point.

What are the penalties for a wrong or missing adverse-action notice?

Willful violations carry $100–$1,000 per violation plus actual and possible punitive damages and attorney's fees under 15 U.S.C. § 1681n; negligent violations carry actual damages plus attorney's fees under § 1681o. Per-applicant exposure compounds quickly across a portfolio.

Can leasing software make the denial decision for me?

The compliant pattern is for software to qualify and route applicants on neutral, applicant-stated criteria before any consumer report is pulled, then hand the accept/deny decision and the FCRA notice back to your own process — the legally significant step stays with you.

The denial moment is a compliance moment. Get the notice right every time, keep your screening criteria fair under the Fair Housing Act, and remember that AI screening doesn't lower either bar — it raises the volume of decisions that have to be made correctly.

See how LetHub speeds your leasing funnel while your team keeps every legally significant decision. Book a demo.

This article is general information only, not legal advice. FCRA requirements and state-specific timing rules vary; consult qualified counsel for guidance specific to your properties and jurisdiction.