What does GDPR mean for the recruitment industry?

Good introduction from LMA Recruitment on what GDPR is and how it will affect all organisations from May 2018.

What does GDPR mean for the recruitment industry?

"GDPR is being introduced in May 2018 to protect European Citizens’ personal data and will be compulsory for all organisations, even those outside the EU, who handle the personal data of any EU resident."

"The European Commission has said:
“Personal data is any information relating to an individual, whether it relates to his or her private, professional or public life. It can be anything from a name, a photo, an email address, bank details, posts on social networking websites, medical information, or a computer’s IP address.” "

"If you handle and store data about people, you are responsible for its safe keeping and security as well as ensuring the right people have access to it. You also need to apply the necessary control over how you share this information with others, as again you will be held responsible for how third parties use and protect the data."

Key elements that will affect recruitment :

Consent
Access requests
The right to be forgotten
Paper trail

Comments

ICO to fine Marriott International £99m for 339 Guest Records Breach

The UK Information Commissioner’s Office (ICO) has issued a notice that it intends to fine Marriott International £99m in relation to a reservation database incident announced on November 30, 2018.

Dixons Carphone Data Breach - Now Up to 10 Million Customer Records

Although a pre GDPR data breach, Dixons announced on 31st July 2018 an update to the breach they identified in June. When initially announced on 13th June, it was 1.2 million customer records involved, but with further investigation the breach now looks to have affected approximately 10 million records.

Scottish Rugby: Explicit Consent, Freely Given

I'm currently in discussion with Scottish Rugby about their privacy policy in relation to their new player registration system . In the past, for a person to play in a Scottish Rugby run competition, that person had to be registered on the SRU player registration system. Player registrations were administered by the Club that player played with, with each Club being a independant organisation, all of whom are Members / mutual stakeholders in the Union. All rugby union games in Scotland are governed by Scottish Rugby rules, regulations and bye-laws. From 25th May, a new player registration was introduced, which Clubs will still administer, but it also gives players direct access to their record. The first stage of implementing the new system is for the individual player to confirm their record by logging into the system, firstly accepting the SRUs privacy policy.

GDPR - Protecting Personal Data

Search This Blog