Connecting linkedin

GDPR - denial and confusion reigns

10 months ago by Neil Pickstone

W1siziisijiwmtcvmtavmdkvmdkvntgvndmvndm5l0deufigagvhzgfjagugcgljlmpwzyjdlfsiccisinrodw1iiiwimjiwmhg2mdbcdtawm2mixsxbinailcjvchrpbwl6zsjdxq

I’d estimate that less than 2-3 percent of the recruitment industry is ready for the GDPR 

Most of the 26,000-27,000 recruitment agencies in the UK alone are still working on systems that will be redundant after the GDPR comes into force.

 

The recruitment industry is already a heavily regulated sector, but what’s different about the GDPR is that we don’t yet know what it means. As at today, the ICO has not published consent messages, for example, so we are left in a state of guesswork and confusion, which hardly seems fair when the GDPR becomes law in May. Not a guideline - but the law.

 

Consent or avoid?

I see a real danger in that many legal teams seem to be telling their clients to avoid taking on responsibility by avoiding commitment. To put this into context, they’re saying that if you actively seek consent from a data subject, you’re aligning yourself to the regulation and could therefore be sued for not complying. To me, burying your head in the sand is not an option - this is law, black and white.

 

As it currently stands, there is no grace period, little room for interpretation and the recruitment industry seems to be a sitting duck. Don’t forget that the ICO is, after all, a government profit centre that has grown its numbers from around eight people to a couple of thousand in the last few months. It will need to prove its worth and its funding.

 

Currently, if an individual seeks compensation and can prove negligence, an average payout will be between £2,000 - £4,000. Multiply that by the number of candidates a typical recruiter holds on its database and the consequences of a breach would be devastating.

 

Recording consent

In my opinion, one thing is clear: it’s no use taking consent unless you are able to log and produce a dated and trackable record that you’ve got the relevant permissions, with auditable version controls and the required subject access requests in place.

 

At Volcanic, we’ve been working on our GDPR-compliant platform for months. We’ve build a gold standard of compliancy that will support all our clients’ websites.

 

Until the ICO is prepared to publish its statements and consent messages and gives the recruitment industry a clear definition of exactly how to comply with the GDPR, I can’t see how it will happen. Certainly not by May.


For the full story, listen to my exclusive interview with Idibu.  At Volcanic we are Volcanic is supporting the recruitment industry towards GDPR compliance ahead of the May 2018 deadine. Download your free guide to GDPR for recruitment agencies that walks you through the 12 principles set out by the ICO and gives pragmatic advice on how to deal with them, or contact us for more information.​

 

3 MONTHS AGO BY NEIL PICKSTONE

W1siziisijiwmtgvmdyvmduvmtuvntavmtmvnja0l0deufigznj1c3ryyxrpb24uanbnil0swyjwiiwidgh1bwiilci0mdb4mzawxhuwmdnjil0swyjwiiwib3b0aw1pemuixv0

Since the GDPR became law last month, there's still confusion surrounding the more specific terms of the PECR Here at Volcanic, we set out to make things a little clearer for the recruitment industry. To give them their full title, the Privacy and...

READ MORE

3 MONTHS AGO BY NEIL PICKSTONE

W1siziisijiwmtgvmduvmzevmdgvntuvmzavnzmzl1njcmvlbibtag90idiwmtgtmdutmzegyxqgmdkuntuumtyucg5nil0swyjwiiwidgh1bwiilci0mdb4mzawxhuwmdnjil0swyjwiiwib3b0aw1pemuixv0

That’s the little big number so far across the Volcanic platform since last week; and that oxymoron really does sum up the mad rush post 25th May - Friday’s charge totalled 10 with further enthusiasm on the bank holiday being demonstrated by 5 req...

READ MORE

3 MONTHS AGO BY NEIL PICKSTONE

W1siziisijiwmtgvmduvmtqvmtuvndmvndkvny9cscbpbnrlz3jhdglvbi5qcgcixsxbinailcj0ahvtyiisijqwmhgzmdbcdtawm2mixsxbinailcjvchrpbwl6zsjdxq

To further support our clients in meeting their GDPR obligations, Volcanic has launched a new integration with Bullhorn. This new service allows all our Bullhorn clients to integrate their GDPR consents directly and automatically from their websit...

READ MORE

6 MONTHS AGO BY NEIL PICKSTONE

W1siziisijiwmtgvmdivmjivmtevmdcvmzivnti0l3nodxr0zxjzdg9ja18zotkyodg5ntuuanbnil0swyjwiiwidgh1bwiilci0mdb4mzawxhuwmdnjil0swyjwiiwib3b0aw1pemuixv0

In the second in the Volcanic GDPR video series we take a look at GDPR and security. GDPR compliance requires companies to take steps to ensure the ongoing confidentiality, integrity, availability and resilience of their systems, and to document t...

READ MORE