From the moment candidates submit their CVs until the time they are hired, employers and recruitment agencies deal with and process people’s personal data. Here are a few key directives of GDPR that affect the daily work of recruiters and hiring teams:
You need legitimate interest to process candidate data so GDPR obliges you only to collect data for a legitimate purpose
You need to have candidate consent to process sensitive data
You need to assume responsibility for compliance
In the event a person requests their data be removed or deleted, employers are obliged to do so.