Most companies recruit. Even if you are using a recruitment agency, you will need to be stringent with the personal data you are storing. Personal data is anything relating to a person’s life, including their address, CV and pretty much any personal data you might collect during the recruitment process.
In this second instalment of our GDPR compliance series, we’re going to be looking at how the GDPR affects recruitment and the areas you need to be aware of when it comes to the changes in legislation. We’ll also give you seven necessary tasks that you need to carry out to ensure that you’re ready for the GDPR before the deadline.
Your recruitment process may involve online applications, CV’s forwarded by agencies and CV’s sent directly. With GDPR coming into play, you will need to gain an understanding of the personal data you are storing throughout your recruitment process and whether this fits in with the new legislation.
Before storing any information, you will require consent from the individual and they will have the right to be informed about what you intend to use their information for. Please note that an individual can withdraw consent at any time to the processing of their personal data.
Individuals have the right to subject access; this means that they can ask, at any time, to get a copy of any information you hold on them, so now is the time to archive any personal data you no longer need and ultimately delete. Archiving alone will not meet the erasure requirements.
There will be examples where you are required to keep data for a minimum period e.g. the Conduct Regulations require recruiters to keep certain records for at least a year. In this instance, you must ensure data is destroyed after the set period and you must explain the same to the individual.
We discussed the changes to individual rights in our first article – What is the GDPR, so click here to take a look.
Any automated processes in recruitment must be transparent. If candidates have a decision made about them based on automated processes, they may be able to appeal the decision.
Employers who are working with recruitment agencies must also be aware of their compliance with GDPR. It is worth taking a look at your PSL and making sure you know what the agencies processes are and how they are ensuring compliance with the GDPR legislation.
Now is the time to start reviewing your current recruitment process to get ready for the GDPR, so some investigation is required to gauge just how many changes you need to put in place to be fully compliant and stay on the right side of the law.
Carrying out the following tasks will give you a great start towards total GDPR compliance and provide you with a clearer picture of what changes your business needs to make in regards to personal data:
We hope you’ve found our how the GDPR affects recruitment article useful. If you missed the first part of our GDPR series, what is the GDPR?, click here to read the article.
In our final GDPR article, we’ll be sharing an easy to follow checklist for complying with the legislation throughout your recruitment process. Check back soon and don’t forget to subscribe to our mailing list to get the latest update.
Disclaimer: The information contained within this article are given in goodwill and Appointments Personnel Limited uses all reasonable efforts to ensure that it is accurate. Appointments Personnel Limited shall not be liable under any circumstances for any loss, expense, damage, delay, costs or compensation (whether direct, indirect or consequential) which may be suffered or incurred by you.