Screening documents: authenticity, portable reports, and privacy

Review a document without making an accusation

Check names, dates, arithmetic, period covered, and consistency with the stated income source. A formatting difference or an unusual employer is a reason to verify, not proof of fraud. Ask for appropriate clarification and use independently verified contact details.

Use the same written criteria and document-review process for all applicants. Consider permitted alternatives for self-employment, benefits, foreign employment, or limited credit history. Keep human review and any required notices in the decision process.

Check portable and international report requirements

Determine whether local law requires acceptance of a qualifying portable report or limits application charges. Verify its provider, date, scope, and authenticity using a protected process. Do not assume an uploaded PDF gives authority to order a new report or charge another fee.

A report from another country may cover a different period or data source. Explain missing information and acceptable alternatives without treating nationality as a screening criterion. Keep identity verification separate from assumptions about a person's background.

Review a reusable report before ordering another check

A portable or reusable screening report is obtained for an applicant to share with more than one housing provider. It is distinct from the rental application, your written selection criteria and any new screening order. Before charging or ordering, check the actual property's acceptance, disclosure and fee rules.

1. Record the report date, source, information-current date, applicant and permitted delivery route.
2. Check the legally required content, age, access cost and any allowed material-change statement. Do not add prohibited credit or criminal-history requirements.
3. Verify unclear information through an independently confirmed provider channel with appropriate permission; request a focused clarification or permitted alternative.
4. Record whether the report qualifies, whether acceptance is required or elected, and which charge is prohibited before continuing.

Use the FTC's landlord guidance for permissible purpose, reporting-agency certification and adverse-action duties. Sharing a PDF is not consent for every new order or unrelated disclosure. Get the applicable authorization and confirm who pays before an additional check; an unfavorable decision based partly on a consumer report still requires the appropriate notice and dispute information.

Apply the property's rule instead of one national report policy

These examples explain why report qualification, acceptance and fees are separate questions. Check the current law and local protections for the address before acting:

• Colorado: enacted 2026 changes remove the requirement to deliver through an agency/third-party site and omit specified credit information for housing-subsidy applicants. Review current qualifying-report and exception rules.
• Washington: RCW 59.18.257 requires disclosure of whether reusable reports are accepted, including on the property website. If accepted, an additional landlord report cannot be charged to the applicant.
• Maryland: section 8-218 requires acceptance-policy notice. If a qualifying reusable report is accepted, neither an access fee nor application fee may be charged.
• Illinois: 705/30 protects a qualifying recent report supplied without access cost and containing all consistently used screening criteria. Do not omit that last condition; additional processing does not authorize a screening charge.
• New York: RPL 238-a requires waiver of specified check fees when an applicant supplies a check conducted within 30 days, subject to the statute's scope and exceptions.
• Rhode Island: the enacted fee rule distinguishes prohibited application fees from specified official background/credit checks supplied within 90 days. It is not a universal 30-day combined-report rule.

For California, check Civil Code 1950.1 and current screening-fee rules together. Do not infer mandatory acceptance from another state's law. In every location, permitted report content does not establish which records may lawfully influence a decision. Acceptance does not approve the applicant, prove authenticity or permit unrestricted reuse of private information.

Limit collection and access

Collect only information needed for the authorized purpose, explain its use, and restrict access and retention. Do not ask for a replacement credit identifier or treat a credit privacy number as a lawful substitute for required identity information. Investigate discrepancies through the proper process.

HHS explains that HIPAA applies to covered entities and business associates. Ordinary rental management is not automatically covered by HIPAA, but that does not remove other privacy or fair-housing obligations. Keep accommodation information restricted and avoid requesting unnecessary medical details.

Check the business's HIPAA role before applying medical-record rules

HHS defines covered entities and business associates by their role. Covered entities include health plans, health-care clearinghouses and providers conducting specified electronic transactions. Business associates perform defined functions for a covered entity. Receiving an accommodation letter does not, by itself, establish either role.

Ordinary rental management is not automatically subject to HIPAA. If the business also provides health care or services under a health-care contract, review that actual arrangement before making a coverage claim. Other applicable privacy and housing obligations still matter. Do not label a rental file or software service HIPAA compliant simply because access is restricted.

Keep accommodation evidence focused and confidential

Under HUD and DOJ guidance, when both the disability and accommodation need are apparent or known, do not seek further verification. Otherwise request only reliable information needed to establish the disability-related need. Medical records and detailed diagnoses are usually unnecessary. Consider oral requests or requests outside your preferred form, and respond promptly.

Keep supporting information confidential. Share it only with people who need it to assess the accommodation decision, or when disclosure is required by law. As a practical handling step, separate sensitive evidence from routine screening notes and repair messages. A contractor usually needs the approved work instructions, not a resident's diagnosis. Incidental medical equipment or medication seen during a lawful visit should not become an informal screening record.

Check pay periods, totals and the income source

Review a pay stub as a record to confirm, not a visual fraud test. Compare the employee and employer names, pay-period dates, hours or salary basis, gross pay, deductions, net pay and year-to-date totals across the supplied records. Ask about arithmetic or timing differences; bonuses, changed hours and payroll corrections can affect the figures.

Rounded amounts, unfamiliar layouts, blurred scans or similar-looking letters and numbers do not establish that a document is false. Request a clearer original or a focused explanation when something cannot be read. Do not require an exposed Social Security number merely to compare a document's appearance.

A W-2 is a wage and tax statement for a tax year. Use the IRS Form W-2 reference to understand the form, then compare the relevant year and employer with supporting records. A current pay period and an earlier tax year are different measures; a W-2 alone does not confirm current employment.

Resolve a discrepancy through a consistent process

1. Describe the specific information you could not confirm, using neutral language.
2. Request only the clarification or permitted alternative needed, with a reasonable stated response date and a secure submission method.
3. With appropriate permission, contact the employer through an independently verified business channel. Confirm what it is authorized to disclose; a missing response is not proof of deception.
4. Record the information considered, the applicant's explanation and the applicable written criteria before deciding.

The FTC explains landlords' consumer-report obligations. If a consumer report contributes to an unfavorable decision, provide the required notice, including when a reference-checking service supplied the relevant report. Keep private documents restricted. If the tenancy has already begun, obtain qualified local advice before changing the agreement or pursuing enforcement.

Separate identifier limitations from the application process

When a report service cannot process the available information, record that technical limitation accurately. Confirm its actual accepted identifiers, geographic coverage, authorization and delivery requirements before any order. Do not insert a made-up number, assume an ITIN is accepted or treat an unavailable US report as an adverse finding. Use the property's locally reviewed process for permitted alternatives and clarification rather than inventing a separate standard for people from another country.

The IRS explains that an ITIN is for federal tax purposes. It does not provide immigration status, authorize work or serve as identification outside that tax system. Keep identity verification, any actual program requirement and report-provider capability distinct; this guide does not promise that Rentari supports every international report or identifier.

For a necessary document in another language or format, identify the fact and period that need clarification. Use an appropriate authorized translation or source-verification process and retain its limitations. Confirm the issuing contact through an independent channel with appropriate permission, allowing for different time zones. Do not request a passport, visa, full bank history or other sensitive file solely because a record is unfamiliar.

HUD's national-origin and other fair-housing protections remain part of the review. Provide clear application instructions and permitted help without using accent, language or nationality as a prediction. Preserve the existing consumer-report notice/dispute process; a vague denial message does not remove applicable requirements.

Recognize a CPN seller's promise without making a housing decision

Credit privacy number, or CPN, is a marketing label often presented as a way to hide an existing credit history. The FTC warns that promises of a new credit identity or concealed bad credit are scams. Misrepresenting identifying information can create serious legal and identity-theft risks; do not buy, supply or request a substitute number to bypass screening.

A privacy question, missing identifier or report mismatch is not proof that someone committed fraud. Apply the guide's existing focused clarification process, confirm actual provider requirements and permitted alternatives, and protect sensitive records. Record the specific unresolved fact rather than a speculative accusation. Do not post identifiers in ordinary notes or send them to informal verification services. Any housing decision remains subject to the applicable criteria, report duties and local protections.

Use correction and recovery channels for suspected identity misuse

Review your own reports through AnnualCreditReport.com and check unfamiliar accounts or identifying information. SSA's March 2026 identity-theft guidance directs people with suspected misuse to IdentityTheft.gov for recovery help and explains that a new SSN is a limited agency process, not a guaranteed fresh credit history.

For inaccurate rental-screening information, the FTC describes disputing with the reporting company, supplying supporting copies and informing the housing provider. Use the report-error guide for the separate Rentari record workflow. Buying a new identifier or changing an application does not correct the underlying consumer report. Keep recovery documents private and use the agency's authentic channels; this guide does not submit a report or decide an applicant's eligibility.

Sources and further reading

• HHS explanation of who follows HIPAA
• IRS: Form W-2, Wage and Tax Statement
• FTC: using consumer reports as a landlord
• Colorado HB25-1236: enacted portable-report changes
• Washington RCW 59.18.257: screening disclosures
• Maryland Real Property 8-218: reusable reports
• New York RPL 238-a: application check fees
• Illinois705/30: qualifying reusable reports
• Rhode Island enacted application/check-fee rule
• IRS: ITIN purpose and limitations
• HHS: covered entities and business associates
• HUD/DOJ: reasonable accommodations, verification and confidentiality
• FTC: credit-repair scams and false new identities
• SSA: identity theft and your Social Security number
• FTC: tenant-background-report errors

Keep learning

• Income verification
• Identity verification
• FCRA compliance

Common questions