What happens to your Data in the Recruitment Process

Helena
4 min readMay 8, 2021

As it has been iterated many times before, we are all sick and tired of the many application platforms where one has to perform the tedious task of feeding all your CV data into various systems. Instead of just uploading a document you are requested to type your name, birthday, address a hundred million times, over and over again.

Sharing ones personal information repeatedly doesn’t make it any less objectionable over time, and there is always a moment of hesitation regardless of the job that is offered.

After I have been in the process of job hunting myself for a while, I’ve come across something rather peculiar — One day I was phoned by an unknown number. I would usually not respond to those but while job hunting it could always be a future employer. The caller however wanted to sell me some type of financial product. He knew all my personal information, my full name, my date of birth, and — obviously — had my phone number. Something I do never deliberately type into any platform for exactly this reason. The only (open) platforms that would ever access this data are the ones that receive my CV.

So… What happened here?

There are legislations in place, depending on which country to send your applications in.

As a leading example, the European Union has placed strict [GDPR] rules precisely stating that organisations shall only access, process and retain personal data if it is lawful (meaning the data requested actually serves the recruitment process).

Furthermore, data can only be kept for the shortest amount of time (and for a maximum of two years from unsuccessful candidates).

GDPR Compliance in Recruiting; EDPS — GUIDELINES CONCERNING THE PROCESSING OPERATIONS IN THE FIELD OF STAFF RECRUITMENT

America on the other hand does not have centralised data protection laws. There are either federal laws that have to be followed, or companies have to make a deliberate ethical choice to keep your personal data safe, and not to sell it to a third party. Generally, application websites will ask you to confirm to their terms and conditions in order to partake in the candidacy. So choices are limited as to whether you want to share your info or not.

U.S. Department of Labour — Internet Applicant Recordkeeping Rule; U.S. Data Protection Laws and Regulations; Employee Data Protection in the U.S.

Now what about other Countries

In August 2019 a scandal erupted in Japan when it became public knowledge that a recruiting company had sold detailed information about job hunting behaviour of applicants without their consent. The data was sold to over 35 companies who specifically looked into the data to determine candidate fitness based on their browsing choices.

This has sparked public outrage since these data sets seemed to actively harm applicant’s chances to be hired for a job. After all, it’s still humans that hire with all their personal biases and judgement.

Recruit Career sold job applicants’ browsing data to dozens of firms without consent

The job Applicant already is a Commercialised Product

A look at the privacy policy statements of how the data is being processed makes it clear that individual data may not be disclosed, but the information is used for statistical measures, demographic range, gender, etc. HR- Recruitment Statistics

But it goes deeper than that. Having a look at all the job search websites like Monster or Jooble, which not only serve as marketplaces for recruiting, but also for criminal activity: This article from 2021 explains how these websites are used by fraudulent groups who pose as hiring companies to collect personal information of individuals for the purpose of identity theft.

The article describes what steps to take to avoid those risks. But not all of these job portals offer ways to protect oneself. In fact, most show your profile as “incomplete” until you provide your phone number.

The Verdict your Honour

In this day and age, data is the most valuable and most consumed commodity. Nobody should be surprised that data is being taken advantage of, if it is not protected properly. This however should not mean for job seekers that they need to be vulnerable to crime and be taken advantage of.

Although even before recruiting was (almost solely) taking place on the world wide web, it was common practice between headhunters to share candidate profiles and resumes. This however should not mean that individuals must be exposed to such type of practice. My medical records are not deliberately shared between doctors for the same reason.

Recruiters may be selling your resume; Is it possible that applicant tracking systems are using their users data?

The Solution

Luckily as of today, it is not necessary to disclose any personal details in your CV, really. Back in the day, when resumes were sent out via mail, it was necessary to inform people how to contact you. Today, you won’t have to provide much more than your name and one or another way to contact you.

This however, is something else entirely when you are required to feed your data to an online-form on a website. It is for this reason that the regulations and the infringement of data protection laws have to be more stringent. Job applicants — in this regard — are in the vulnerable position and should not be taken advantage of.

For the applicants: be careful with your data until you are sure the place you applied to is interested. The internet is a great tool for job hunting, this however makes it even more important to protect oneself, regardless of how good the job offer may sound.

How to Protect Your Personal Information During a Job Search; Should You Include Your Full Address on a Resume?; What not to Include in your Resume

--

--

Helena

Still learning. I tell you what I find out along the way.