Draft a privacy notice for a job applicant under the UK GDPR
Key points
Employers must provide job applicants with information about how they process their personal data through a privacy notice (also known as information notices or fair processing notices).
Employers should ensure that all the information required under the UK General Data Protection Regulation (UK GDPR) is contained in the privacy notice and must provide the information at the point of data collection.
The information to be provided includes the legal bases on which the employer is relying to process the personal data. If it is relying on its legitimate interests as a legal basis, it must identify those interests.
If an employer intends to keep the details of job applicants for the purpose of future vacancies, the privacy notice must set out how long the records will be kept (or the criteria for determining the relevant period).
The materials and information included in the XpertHR service are provided for reference purposes only. They are not intended either as a substitute for professional advice or judgment or to provide legal or other advice with respect to particular circumstances. Use of the service is subject to our terms and conditions.