{"id":15099,"date":"2018-05-18T00:00:00","date_gmt":"2018-05-17T23:00:00","guid":{"rendered":"https:\/\/identifi-global.eu.applyflow.com\/gdpr-what-does-it-mean-for-candidates-like-you\/"},"modified":"2022-12-09T06:15:24","modified_gmt":"2022-12-09T06:15:24","slug":"gdpr-what-does-it-mean-for-candidates-like-you","status":"publish","type":"post","link":"https:\/\/www.identifiglobal.com\/news\/gdpr-what-does-it-mean-for-candidates-like-you\/","title":{"rendered":"GDPR: What does it mean for candidates like you?"},"content":{"rendered":"
\n\t\"\"<\/div>\n
\n\tIf last year\u2019s Word of the Year was \u2018youthquake\u2019, this year\u2019s may well be \u2018GDPR\u2019.<\/div>\n
\n\t <\/div>\n
\n\tInterest in the new EU privacy directive has hit fever pitch, not least for those working in cyber security, IT and digital roles \u2013 many of who will be responsible for implementing the legislation in their organisation.<\/div>\n
\n\t <\/div>\n
\n\tBut for all the noise around the change \u2013 Google throws up 13 million pages on the topic \u2013 confusion reigns. First among businesses, which are unsure about their obligations. Second among individuals.<\/div>\n
\n\t <\/div>\n
\n\tCandidates for IT roles are acutely aware of the change and concerned about their data rights in the future. So what does GDPR mean for candidates?<\/div>\n
\n\t <\/div>\n
\n\tThis article will explain the regulation from a candidate perspective, including how it relates to personal information held by job boards and LinkedIn \u2013 which can often cause irritation for candidates.<\/div>\n

\n\tWhat is GDPR?<\/h1>\n
\n\tComing into force on 25 May 2018, the GDPR (General Data Protection Regulation) is an EU directive designed to protect individual data rights by limiting how organisations gather, store and process personal information.<\/div>\n
\n\t <\/div>\n
\n\tThe legislation is designed to bring data protection regulations \u2018up to date\u2019 with businesses\u2019 and digital service providers\u2019 use of data, today. The legislation applies to all sectors of industry.<\/a><\/div>\n
\n\t <\/div>\n

\n\t“Organisations may only process data if doing so provides value for the individual.”<\/strong><\/h4>\n
\n\t <\/div>\n
\n\tUnder the legislation, organisations must ensure their customer and contacts consent to being contacted for commercial reasons, or that the organisation in question can justify contact according to their \u2018legitimate interest\u2019. Organisations may only process data if doing so provides value for the individual, according to one of six \u2018legal bases\u2019 outlined by the legislation.<\/div>\n

\n\tWhat does GDPR mean for candidates?<\/h2>\n
\n\tFor job candidates, GDPR means having greater control over their data rights. This means:<\/div>\n
    \n
  1. \n\t\tBeing able to instruct recruitment agencies to remove all personal data from their records, and that<\/li>\n
  2. \n\t\tRecruiters may only use individual data in activity candidates have consented to, or which the business can justify as being a matter of \u2018legitimate interest\u2019.<\/li>\n<\/ol>\n
    \n\t <\/div>\n
    \n\tOnce GDPR is implemented, recruitment agencies will also be responsible for making it clear to candidates how they are using their data and, if requested, to stop processing it.<\/div>\n
    \n\t <\/div>\n
    \n\tIn the main, however, many recruiters will continue to obtain, store and use candidate data in the same way as previously.<\/div>\n
    \n\t <\/div>\n
    \n\tTo understand why, it\u2019s important to understand how recruitment agencies work.<\/div>\n
    \n\t <\/div>\n
    \n\tMost recruitment agencies store only a small amount of information on each candidate they work with. This includes CV information, salary expectations and a limited number of contact details, including name, address, email address and contact telephone number. When a candidate is successful in finding a job, the recruitment agency will likely ask for additional information, which can include passport, banking and reference details.<\/div>\n
    \n\t <\/div>\n
    \n\tThe first batch of information described above is gathered by recruiters in three key legal ways. First, the candidate provides their data directly. Second, the recruiter pays to access candidate data stored by an online jobs board. Third, they obtain the information from LinkedIn.<\/div>\n
    \n\t <\/div>\n
    \n\tOften, individuals complain that they\u2019ve been contacted by recruitment teams for irrelevant roles, with the recruiter having got hold of their personal details unlawfully. This is impossible. Instead, this demonstrates that many candidates aren\u2019t aware that in uploading their personal data to online job boards or LinkedIn, this information is made available to other businesses, either for free or at a cost. In reality, this is how recruitment agencies collect most of their candidate data. Many candidates believe that they are uploading their contact details and career history for a specific role, unaware that their CV will be hosted for a considerable time afterward.<\/div>\n
    \n\t <\/div>\n

    \n\tWill recruiters no longer be able to contact me, post-GDPR?<\/h3>\n
    \n\t <\/div>\n
    \n\tUnder GDPR, only certain types of data collection will change, and candidates may therefore still be contacted by recruitment teams that they haven\u2019t spoken to before.<\/div>\n
    \n\t <\/div>\n
    \n\tRecruitment agencies will still be permitted to store candidate data according to \u2018legitimate interest<\/a>\u2019 \u2013 one of the six legal bases outlined in the GDPR regulation. In short, this legal clause states that organisations may process data where they, or the data owner, has a legitimate interest in this processing. Recruitment agencies use data to help candidates find their next role. Both parties therefore have a legitimate interest in the processing of data.<\/div>\n
    \n\t <\/div>\n
    \n\tWhat will change is the nature of consent, which will affect contact with individuals who do not provide their information directly to recruiters.<\/div>\n
    \n\t <\/div>\n
    \n\tUnder GDPR, agencies may only communicate with candidates that have given their explicit consent to this type of contact (if contact cannot be justified by legitimate interest, as outlined above). This consent may or may not be given by candidates when they upload their CV to a jobs board or LinkedIn, according to the terms and conditions of the platform. This will, in turn, affect whether agents can contact candidates \u2018out of the blue\u2019 using information gathered from jobs boards.<\/div>\n
    \n\t <\/div>\n
    \n\tAgencies who rely on consent marketing to build their data lists will have to change their methods post-GDPR, because consent from candidates can no longer be assumed. As it stands, candidates give their permission to be contacted by employers and recruiters about relevant roles when they upload details to most job boards. This is how the sites make their revenue: by allowing recruiters to access relevant candidate CV data, for a fee. 319,550 CVs were downloaded from CV Library on a single day in May 2018<\/a>.<\/div>\n
    \n\t <\/div>\n
    \n\tWith LinkedIn the situation is slightly different. Users upload their career and contact information to the site, which is made public according to the legitimate interest of LinkedIn and the candidate themselves. Once a recruiter obtains information from the platform, however, it becomes their responsibility as data controller. The recruiter must therefore justify their processing of that data via legitimate interest or by obtaining consent from the candidate in question.  <\/a><\/div>\n
    \n\t <\/div>\n

    \n\tTime to review<\/h4>\n
    \n\tGDPR is therefore the perfect opportunity to review where and how your CV is stored online. As a minimum, we\u2019d encourage readers to read the privacy policies of any recruitment sites they\u2019ve used previously. Meanwhile, get to know your recruitment agency better. Ask them where they accessed your data and how they plan to use it to find your next role.<\/div>\n
    \n\t <\/div>\n
    \n\tIf you\u2019re uncomfortable with your agency\u2019s answers, ask them to withdraw your details from their records, invoking your rights under GDPR. But remember: it\u2019s in the interest of a quality recruitment consultant to work for you, not against you, to find the right role for you. Don\u2019t let one bad experience put you off recruitment agencies for good \u2013 especially those who guarantee their performance under a Candidate Charter, as we do.<\/a><\/div>\n
    \n\t <\/div>\n
    \n\tNow you can control where your CV is held, make it work harder for you with our guide to CV-writing for cyber-security, IT and digital professionals.<\/div>\n","protected":false},"excerpt":{"rendered":"

    If last year\u2019s Word of the Year was \u2018youthquake\u2019, this year\u2019s may well be \u2018GDPR\u2019.   Interest in the new EU privacy directive has hit fever pitch, not least for those working in cyber security, IT and digital roles \u2013 many of who will be responsible for implementing the legislation in their organisation.   But… Read More »GDPR: What does it mean for candidates like you?<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":14236,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","footnotes":""},"categories":[39],"tags":[],"class_list":["post-15099","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-industry-news-trends"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.identifiglobal.com\/af-api\/wp\/v2\/posts\/15099","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.identifiglobal.com\/af-api\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.identifiglobal.com\/af-api\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.identifiglobal.com\/af-api\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.identifiglobal.com\/af-api\/wp\/v2\/comments?post=15099"}],"version-history":[{"count":0,"href":"https:\/\/www.identifiglobal.com\/af-api\/wp\/v2\/posts\/15099\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.identifiglobal.com\/af-api\/wp\/v2\/media\/14236"}],"wp:attachment":[{"href":"https:\/\/www.identifiglobal.com\/af-api\/wp\/v2\/media?parent=15099"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.identifiglobal.com\/af-api\/wp\/v2\/categories?post=15099"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.identifiglobal.com\/af-api\/wp\/v2\/tags?post=15099"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}