General Data Protection Regulation (GDPR) is in force in Europe from the 25th of May 2018. This is all about strengthening and unifying data protection for all individuals within the European Union (EU). It also addresses the export of personal data outside the EU, enforces penalties for breach and defines stronger conditions for consent. At its heart, GDPR is about protecting the rights of individuals (think employees and job candidates).
GDPR provides the following rights for individuals:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- Rights in relation to automated decision making and profiling.
GDPR not only applies to organizations based within the EU but it also applies to those that are tracking the personal data of staff located in the EU. For more background information on GDPR, please refer to the OrangeHRM white paper located at http://blog.orangehrm.com/2017/11/17/gdpr/.
The Candidates are asked to provide consent for keeping the candidate data for future processing.
If a candidate agrees and provides consent, their records will not be removed from the vacancy when purging candidate data.