Starting on25May 2018, recruitment organizationsthatcollect data from EU candidates must comply with the General Data Protection Regulation (GDPR).This new law aims to protecttheprivacy of candidates.
TheGDPR puts theonus of compliance onrecruiters doing business within the EU, even if they are not based there.Recruiting firms need to be on high alert, as they heavily rely on collecting and storingcandidate data.Failure to comply with GDPR canincur finesup to
Challenges of meeting GDPR
The fundamental compliance challenge for recruiting firms will be to identify and map all the ways that personal data is used in your organization.Understanding how and why data is collected, where it is storedand for how long, whether it is shared, and how it is secured are all importantconsiderations for GDPR compliance.
Once personal data is identified, organizations must ensure appropriate measures to secure it.Although data security can seem intimidating, it is critical for mitigation and recovery preparedness.
The GDPR further strengthens data protection by restrictingthetransfer of personal data(Refer).Accordingly, organizations that handle data must regularly monitor the physical locations where data is stored.Whetherin thecloud or on-premise, identifying, monitoring, and controlling where your data resides is mandatory.
Under the GDPR, subjects haverights to their data.Provisions need to be made to respond to the data subject’s requests, including rectification, deletion, and stoppage of use.Happily, cloud-based data storage makes all these things simpler and safer.
Othermeasures to demonstrate compliance involve proper governing structures, information notices,audit trails,breach reporting mechanisms, and more.
To reducethe liabilitiesof non-compliance,compliantprovide agility, efficiency, scalability, and most of all, peace of mind. ²վ Recruit isready for the GDPR.
Tolearn moreabout GDPR, read our new ebook,EverythingRecruitersNeed toKnow about GDPR.
Comments