Let AI help you screen. Keep every consumer-report use and adverse action authorised, consent-gated, and replay-provable.
AI agents now pull background checks, read consumer reports, and decline candidates and tenants. Under the FCRA a report-driven denial is an adverse action that needs a notice naming the agency, and under California's ICRAA an investigative report cannot even be pulled without written consent. The KYE Consumer-Reporting & Adverse-Action Authority Pack™ governs every one of those moves at the moment it happens — cutting adverse-action defensibility prep from days to minutes, with a Decision Map™ on every decline and a route for the person to contest it.
KYE Protocol™ is not a consumer reporting agency.
This is the boundary the KYE Protocol™ never crosses, and it is worth stating first. KYE Protocol™ does not generate consumer reports, does not run background checks, does not conduct investigations or interviews, and does not judge the accuracy of any report's contents. Those are the work of the consumer reporting agency and the furnisher. KYE Protocol™ governs one thing: whether your AI agent had the authority to procure or act on a consumer report — and it proves that authority with a signed, replayable record. The accuracy of the data, the reinvestigation of a dispute, and the report itself stay with the agency, always.
Automated screening decisions are regulated, consequential, and hard to defend after the fact.
- A report use needs a permissible purpose. FCRA 15 U.S.C. §1681b lets you procure a consumer report only for an enumerated permissible purpose — and, for employment, only after a clear disclosure and written authorization.
- California adds a written-consent gate. ICRAA Cal. Civ. Code §1786.16 requires clear-and-conspicuous written notice, the consumer's written authorization, and a nature-and-scope disclosure before an investigative consumer report is even pulled.
- An adverse action triggers a notice naming the agency. FCRA §1681m and ICRAA §1786.40 require a user who denies employment or tenancy based on a report to notify the person and name the consumer reporting agency.
- Employment has a two-step sequence. FCRA §1681b(b)(3) requires a pre-adverse-action notice (a copy of the report plus a summary of rights) before the adverse action, then a distinct post-adverse-action notice.
- The usual evidence is weak. Screenshots and reconstructed timelines are contestable. Regulators and applicants want a signed, verifiable record produced at the moment of the decision.
A signed Evidence Pack™ on every decision — verifiable from public keys alone.
- Permissible purpose before the report is used. No agent procures or acts on a consumer report until a purpose-scoped named-authority decision resolves at Purpose Permission™. An unscoped report use is refused.
- ICRAA written consent, enforced at the gate. In California, a move to pull an investigative consumer report is refused unless a recorded written-consent authority — the authorization plus the nature-and-scope disclosure — is present first.
- A Decision Map™ naming the agency on every adverse action. A report-driven denial without a Decision Map™ — the report's contribution and the named consumer reporting agency — is refused at the boundary and sealed into a signed, replayable artefact.
- Every decline is contestable. An adverse action carries an explanation and a bound route for the person to contest it through the KYE Protocol™ rights-disputes rail.
- Honest scope. KYE Protocol™ governs the screening agent's authority-to-act and the adverse-action audit trail — not the report, the background check, or the accuracy of the data. That stays the consumer reporting agency's work.
Governance at the moment of the decision — across the whole screening lifecycle.
Every AI-assisted screening action flows through the same gate. The pipeline binds to canonical KYE Protocol™ envelopes — no bespoke shapes per employer.
- 1 — Action proposed. An AI agent proposes to procure a consumer report, or to take an adverse action, over an applicant for a job or a tenancy.
- 2 — Permissible-purpose check. The gate verifies a purpose-scoped named-authority decision and a declared FCRA / ICRAA permissible purpose. No purpose, no report use.
- 3 — ICRAA consent gate. For a California investigative consumer report, the gate checks that a recorded written-consent authority exists (ICRAA §1786.16) before the report is pulled.
- 4 — Decision Map™ for adverse actions. An adverse action must carry the report's contribution and the named consumer reporting agency, explainable, before it is communicated.
- 5 — Pre-adverse-action hold. For employment, the report-driven adverse action is held advisory until the pre-adverse-action step (copy of the report + summary of rights) is recorded (FCRA §1681b(b)(3)).
- 6 — Evidence Pack™ sealed. The decision emits a signed Evidence Pack™ binding the authority, the consent reference, the Decision Map™, and the outcome.
- 7 — Contestability & attestation. The adverse action carries a bound route to contest it, and the accountable owner co-signs a quarterly attestation covering the decision register and open contests.
Bound to the consumer-reporting regulatory spine.
The Pack binds the canonical KYE Protocol™ artefact set to the laws that govern consumer-report AI. Every claim resolves to a control row on the bound framework, and coverage is stated honestly — never inflated to 100%.
| Framework | Control area | Pack coverage |
|---|---|---|
| FCRA (federal) | Employment / tenant permissible purpose + report-use authority | enforced |
| FCRA (federal) | Adverse-action notice naming the reporting agency | enforced |
| FCRA (federal) | Employment pre-adverse-action two-step notice | designed |
| California ICRAA | Investigative-report use authority + permissible purpose | enforced |
| California ICRAA | Written notice + written authorization + nature-and-scope disclosure | enforced |
| California ICRAA | Report-content accuracy + agency reinvestigation | out of scope |
Enforced means a live KYE Protocol™ rule refuses the action at the boundary when the requirement is unmet, with a CI gate proving it. Out-of-scope areas — the report's accuracy, the furnisher's duties, and the agency's reinvestigation of a dispute — stay the consumer reporting agency's obligations. KYE Protocol™ governs the decision, not the report.
Run a pilot on synthetic data — then deploy with confidence.
The Consumer-Reporting & Adverse-Action Authority Pack™ runs as a 90-day pilot on synthetic applicant data, so your team sees a real Evidence Pack™ before any live data is touched. Pricing is value-based and disclosed under NDA to qualified applicants — closed registration.