There has been so much written on GDPR that we aren’t going to bore you with the ins and outs. One important policy you are now going to need though for your recruitment process is a Privacy Policy.

What does this Privacy Policy need to include? In summary, it should confirm what happens to a candidate’s information once it has been collected: how it’s stored; what valid lawful basis are you using in order to process personal data; is it protected by the necessary security software; how long will the information be stored and will it be passed on to any third parties; who has access to the information and is there a Data Controller that deals with any external enquiries. Don’t forget all candidates have the right to be forgotten so provide a process to enable them to do this.

Make sure you pass your Privacy Policy on to your recruitment agent who will in turn pass it on to all candidates prior to personal information being obtained and sent to you.

Click here for a copy of the ICO (Information Commissionaire Office) GDPR guidance.

If you’re a client of Block Recruit, we will be shortly asking for this policy. If you need help in producing one, talk to your Account manager, we’re here to help.