A background investigation company is considered a Consumer Reporting Agency, (CRA), and is governed by the FCRA. If the company is located in California, there are even more restrictive laws regarding Investigative Consumer Reporting Agencies, (ICRAA), which supersedes the FCRA.
Read More at FCRA
Read More at ICRAA