Grant Candidate Requests To Be GDPR Compliant

/, HR News, Recruitment/Grant Candidate Requests To Be GDPR Compliant

Grant Candidate Requests To Be GDPR Compliant

2019-09-26T10:31:20+00:00 September 26th, 2019|All, HR News, Recruitment|

When you put job adverts and descriptions out there, you will have lots of candidates apply for your roles. A huge part of the GDPR regulations is that customers and suppliers of your business need to be able to make requests about their data and how you store it or when it is deleted. This same GDPR legislation comes in for candidates as you have their personal data.

Candidates have a right to exercise their rights under GDPR laws. As a business you must have guidelines and processes in place to grant candidates requests and stay GDPR compliant.

  1. You must let candidates access their personal data upon request

This means that you need to determine the format of the electronic copy of their data. That must then be given to the candidates. We would recommend that you have a process in place to extract that copy and send it to the candidate.

  1. Delete personal data of candidates and restrict processing at their request

If a candidate requests that their personal data is deleted then you must find all places where data is kept and delete that data. We would recommend that you establish a process to delete all data from these places.

  1. Rectifying candidate data

Again, we recommend that you have a process in place to control the different versions of candidate date you have. For example, you should not have the same candidate data in one spreadsheet, but it changes on another. An ATS system can really help keep your candidate data in order and up to date.

  1. Allowing candidates to withdraw consent

If you decide to use consent as the legal basis for processing then you need to allow candidates to withdraw their consent. The process should be compared the process of giving consent. The GDPR regulations state that the giving of consent should be as easy as the withdrawal of consent. Make sure that your processes for withdrawing consent are clearly detailed on your website or application forms and are easy processes for the candidate to complete.

If you need help ensuring your recruitment process is GDPR compliant please contact Aspire Cambridge on 01223 855440 today!