Draft a privacy notice for a job applicant under the UK GDPR
Key points
Employers must provide job applicants with information about how they process their personal data through a privacy notice (also known as information notices or fair processing notices).
Employers should ensure that all the information required under the UK General Data Protection Regulation (UK GDPR) is contained in the privacy notice and must provide the information at the point of data collection.
The information to be provided includes the legal bases on which the employer is relying to process the personal data. If it is relying on its legitimate interests as a legal basis, it must identify those interests.
If an employer intends to keep the details of job applicants for the purpose of future vacancies, the privacy notice must set out how long the records will be kept (or the criteria for determining the relevant period).
