Lawfulness, fairness & transparency

Consent must be obtained from candidates before processing personal data. When collecting personal data, you should tell candidates who you are, how personal data will be processed and if personal data will be disclosed to third parties (i.e your clients).

Data minimization

Candidate data collected should be adequate, relevant and limited, and you are sufficiently capturing the minimum amount of data needed for processing.

​

​

​

Storage limitations

Personal data must be kept in a form which permits identification of candidates for no longer than is necessary for the purposes for which the personal data are processed. You should have a data retention policy that identifies when and how records may be destroyed.

Purpose limitations

Candidate data collected can only be used for legitimate and specific reasons, and you must inform candidates of these reasons.

​

​

​

Accuracy

You must take reasonable steps to ensure that personal data is accurate and kept up to date. This includes updating or deleting inaccurate data or when a candidate inform you of any changes.

Integrity and confidentiality

Personal data must be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.

​