Do you feel confident you have the whole GDPR thing zipped up? Zoho, who offer beautifully smart recruitment software to help you grow your business, share 9 top facts for Recruiters about the new regulations.
1 GDPR (General Data Protection Regulation) comes into effect on 25th May 2018 and it will impact everybody working in recruitment? GDPR will replace the current Data Protection Act and is a new piece of EU legislation which seeks to strengthen and unify data protection for individuals in the EU, giving them greater control over their personal information.
2 It applies to all businesses worldwide that have access to and process “personal data” of any EU citizen. and even when Brexit kicks in it will still apply
3 A breach of the new regulations could result in fines of up to 4% of global annual turnover or twenty million euros (whichever is greater) so it’s important to take it seriously!
4 In truth, you shouldn’t be thinking it’s all about fines, it’s about putting the individual first and frankly we should all want full control over our personal data. In fact you could consider it an opportunity to build stronger and better relationships with candidates and clients.
5 Recruitment Agencies; your clients will be affected by GDPR too so they may have to change how they interact with you. Also investigate your relationships with email mailing providers, job boards and your CRM.
6 It is your responsibility to ensure that your business is complying with the new regulations (including via any external suppliers like CRMS that you use) and it’s mandatory to report any data breach within 72 hours of discovery.
7 Here’s a key one; individuals (ie jobseekers/candidates) have the right to be forgotten by companies they have given personal details to. They can ask for their personal data back at any given time and you’ll have to do this within one month of the request. Individuals need to be informed of their rights, and their ability to withdraw their permission to access and hold their personal data.
8 Personal data isn’t just CVs it could include things like IP addresses, cookies and location information. In fact hardly any personal data will not fall under the regulations – making it difficult for organisations to avoid having to comply with its requirements.
9 Consent is key. YOU have to gain explicit consent to use personal data instead of assuming or gaining implied consent. That consent is time specific (and people can withdraw their consent once it has been given). So you need to be clear about why you want their details, how you intend to use them, the way in which you will store them and for how long.
More from Zoho next month!
