What is a recruitment privacy notice?
The basics: This recruitment privacy notice template is a legal statement that indicates how your recruitment company collects and processes the personal data of candidates. It is a non-negotiable document that can be posted on your recruitment website, where candidates can access it without having to contact you - it could also be provided to candidates via another method (e.g. via email when they register with your recruitment business).
Find out more about recruitment privacy notices by reading this comprehensive guide.
How can your business benefit from using this recruitment privacy notice template?
Legal requirement: It is a legal requirement to give certain information to data subjects via a privacy notice when you are processing their personal data. As a recruitment business, you will collect and access a range of personal data about candidates, so it’s key that they are provided with a privacy notice that tells them how and why you are using that personal data. Failure to do so could have a huge impact on your business:
- Damage to your reputation: Non-compliant data protection practices can lose the hard-earned trust of individuals - having a privacy notice in place is an obvious way to demonstrate to individuals that you take their privacy seriously and make your business even more attractive to them;
- High-value fines: In the event of non-compliance with data protection laws, your business could be exposed to multi-million-pound fines and legal action; and
- ICO investigations: If complaints are made about your data protection practices, this could ultimately lead to an ICO (the data protection regulator in the UK) investigation. This type of investigation would cause the ICO to look into your data protection practices and procedures in detail, and potentially take action where non-compliances are identified.
When should I use a different privacy notice?
Employees: You should not use this document for employees – a separate document should be drafted and made accessible to the people you have hired (e.g. via an intranet) and different policies, purposes and retention periods will apply. Our dynamic employee privacy notice can be used for employees / workers.
Future employees: If you are the business that will be employing individuals (i.e. the future employer as opposed to the recruitment business that acts as an intermediary), you should use this job applicant privacy notice instead.
Website visitors / other third parties: You will collect information about other third parties during the course of your business, and this will likely include website visitors. The information given to these individuals should be tailored to them - you can use our website privacy notice to do this.
This recruitment privacy notice template assumes that you are a UK business and that English law applies. It is drafted to comply with the UK GDPR.
What does Docue’s recruitment privacy notice template include?
Tailored to candidates: The recruitment privacy notice explains who your company is, how you collect and process data, what you use it for and on what legal basis, and who you share it with. For example, you may record your communications with a candidate, along with their CV and cover letter, for a certain period of time after they have either been successful or unsuccessful in the hiring process, and you may share this data with the companies who you have been instructed to recruit for.
Key provisions: UK data protection laws have strict requirements about the information that a privacy notice must set out, which include:
- Controller details - the identity and the contact details of the controller (which will be the recruitment company in the case of a recruitment privacy notice);
- Data protection officer (DPO) - if you have appointed a DPO, the contact details of the DPO must be provided to candidates via the privacy notice;
- Purpose and lawful basis - the specific purposes of the processing as well as the lawful basis for the processing must be included (and where legitimate interests are relied upon as the lawful basis, details of the specific legitimate interests);
- Data sharing - job candidates should be given details of the recipients or categories of recipients of their personal data e.g. the company you are recruiting on behalf of, other group companies, software providers;
- International transfers - where applicable, you need to tell candidates that you are transferring their personal data to a country outside of the UK and EEA;
- Retention period - you must tell candidates the period for which their personal data will be stored, or if that is not possible, the criteria used to determine that period; and
- Data subject rights - a privacy notice must tell data subjects what their rights are under data protection laws. This includes the right to request access to and rectification or erasure of personal data, the right to request the restriction of processing concerning the data subject or to object to processing, the right to data portability, the right to withdraw consent at any time and the right to lodge a complaint with the ICO.
You can include all of the matters listed above (plus more!) in Docue’s dynamic recruitment privacy notice template, to produce a legally compliant recruitment privacy notice that is ready for use with your candidates.
Create a recruitment privacy notice in no time using Docue
Maintained by lawyers: Docue’s recruitment privacy notice template is lawyer-made, lawyer-maintained, and has lawyer-crafted guidelines to steer you through every stage of drafting your document. It is kept up to date by our lawyers so it always meets the requirements of ever-changing data protection laws.
Simple to use: To create your recruitment privacy notice with confidence and speed, simply click through the intelligent tick box options and text box answers and you’ll have a comprehensive, tailored, and ready-to-use policy in no time.
Tags: recruitment privacy notice template, recruitment privacy notice, recruitment privacy policy
