GDPR recruitment process

Here, we look at the eight principles concerning candidate rights under the GDPR. This post looks at the two principles of RTBF and data portabililty in terms of the GDPR recruitment process.  

 

The right to erasure - the right to be forgotten or RTBF

The broad principle underpinning this right is to enable an individual their personal data be deleted or removed where there is no compelling reason for its continued processing.

 

What does this mean for me?

  • You must respond to the request and action it within one month.

  • This is a request that can be handled by the individual by logging in to their self service dashboard and requesting their RTBF.

  • It’s important that this action is validated, as there may be circumstances where data should be kept (eg where there is a legal duty to keep records).

 

The right to data portability

The right to data portability allows individuals to get hold of and use their personal data for their own purposes across different services. It allows them to move, copy or transfer personal data easily from one IT environment to another safely and securely.

 

What does this mean for me?

  • This right only applies to personal data an individual has provided to a controller and where processing is carried out based on consent or by automated means.

  • You must provide this data free of charge and in a commonly used format.

  • In the Volcanic dashboard, the individual can access and download all their data as a csv file.

 

Download your free guide to GDPR for recruitment agencies.