GDPR Data Retention For Hiring
To comply with GDPR, companies will need to state how long they will be keeping candidate data in their systems. According to GDPR, data should only be kept for a "reasonable amount of time". This is open to interpretation and is up to companies to decide for themselves. Our best practice advice is to review your recruitment processes to get a sense of how much time these currently take. Many companies are going with a 12 or 24-month time frame once they have reviewed their recruiting practices.
With HireHive, it is easy to automate this data retention process.
- Set your data retention time frame in months
- Set a time frame that ensures data of active candidates is retained for longer
- Let HireHive do the rest! We’ll delete all candidate data that is in the system for longer than the data retention period allows. This will not affect your Reporting functions, and anonymous information will still be available here. If you would like to extend the retention period for a specific candidate, you can do so by extending consent. This will send an email to the candidate asking them if they allow you to keep their data for the set amount of time. They can opt into this, but if the candidate ignores this we will remove them from the account.
Please note: although HireHive has consulted extensively with legal professionals on updates to our product and content we release for GDPR, HireHive is not a legal firm. All information provided by HireHive is general information only. It is not intended to constitute legal advice or seek to be the complete and comprehensive statement of the law, nor is it intended to address your specific company requirements. Companies should seek independent legal advice regarding their own provisions for data protection and security.