GDPR is a new EU regulation that will be enforced from 25 May 2018, it will strengthen and replace the current rules under the Data Protection Act (1998) by introducing new obligations for businesses and rights for individuals.
How GDPR will affect your recruitment process:
- Rights for individuals under GDPR will include having subject access, any inaccuracies correction and right to information erasure
- Individuals have the right not to be subject to a decision that is based on an automated process unless they give you explicit consent. They also have the right to appeal these decisions. If you have any automation in any part of your recruitment process, you must seek consent and be transparent about what you are doing and the criteria you are applying.
- Your privacy policies will need to be updated to incorporate the new things you need to tell people such as your legal basis for processing their data
What will help you?
- Take responsibility for your data cycle and be accountable
- It’s critical to review your existing policies and procedures to comply with GDPR
- Justify the use of obtaining data with consent
- Your policies and privacy notices must be transparent
- An individual’s right to erasure must be respected
- Contact your suppliers and partners to ensure they are compliant and see how they can assist with your compliance
- Elect someone in your organisation to be responsible for data protection
If you are looking for more information on GDPR we can provide guidance or recommend GDPR professionals, call our Operations Manager, Claire Statham on 0151 601 5288 or email claire@jfrecruit.co.uk