CLARE RYDER • 08 Dec 2017
The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) is a regulation by which the European Parliament, the Council of the European Union and the European Commission intend to strengthen and unify data protection for all individuals within the European Union (EU). It replaces the 1995 Data Protection Directive which current UK law is based.
25th May 2018.
The Information Commissioner’s Office (the ICO).
The General Data Protection Regulation gives new rights for people to access the information that companies hold about them, obligations for better data management for businesses, and a new regime of fines. Organisations must be much more explicit in telling individuals what data will be held about them and how it will be used before they submit it. Of particular note, is that candidates will have the right to request the information be deleted at any time. The information is extensive, and we advise your organisation undertakes a detailed review of this legislation to prepare accordingly.
We’ve collated guidance on how to prepare for this legislation with regards to your recruitment process and use of the Jobtrain ATS.
Our dedicated Client Success Managers and our helpdesk, backed up by our in-house technical team are here to help with system set up and any questions on system use.
Jobtrain’s archiving feature – whether by the automated method or individual requests managed by our helpdesk – has been developed to anonymise data so it is no longer “personal data’’ but leaves an anonymous “footprint’’ to enable extensive historic reporting.
In the GDPR, personal data is broadly defined as any information relating to an individual who can be identified, directly or indirectly, in particular by reference to an identifier such as for example a name, address, identification number, email, social media handle, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person.
So with specifically Jobtrain in mind…
Consider whose data you hold. For example:
Consider why you collect, use and hold this data. For example:
Based on whose data you hold and why you hold it, review what data you’re holding, and consider if it’s all necessary? For example:
“Processing” includes the actions of obtaining, disclosing and deleting personal data. Consider the following points:
1. When is the personal data obtained?
2. To who is it disclosed to and why?
3. How long is it retained for?
Consider the following:
The GDPR does not apply to data that is anonymised in such a way that an individual can no longer be identified from the information on its own, or “reconstituted” with other data to enable identification, as it is no longer “personal data”.
Jobtrain’s archiving feature, whether by the automated method or individual requests via our helpdesk, anonymises data so it is no longer “personal data” but leaves an anonymous “footprint” to enable extensive historic reporting.
Specifically relating to Jobtrain:
Download an example of a GDPR data subject access request flowchart – download flowchart.
Jobtrain client, The Isle of Man Government, displays this statement prior to registration which in turn links to the full statement which they call ‘Fair Processing Notice’.
Fair Processing Notice:
The Office of Human Resources, Cabinet Office has a Fair Processing Notice which informs you how we collect and use your personal data. This information is important, therefore, we encourage you to read the Fair Processing Notice carefully. To be able to enter personal data in Isle of Man Government Recruitment Online system, you must give your consent to the processing of your personal data. The Fair Processing Notice is available by clicking here. We may also record information about the way you have used our Site to improve the way it operates.
How we process your information
This notice explains how we collect and use your personal data. Personal Data is any data that relates to you for which you can be identified.
This Site is owned by Isle of Man Government and hosted by Jobtrain Ltd, 4 Tabley Court, Victoria Street, Altrincham, Cheshire, WA14 1EZ. Jobtrain client data is held in the UK only.
Data Controllers – the personal data provided by you on the Isle of Man Government’s e-Recruitment system is controlled by:-
Cabinet Office of the Isle of Man Government
Contact : email@example.com – 01624 686300
Purpose: Collection of all data entered by prospective job applicants in the process of accessing the e-Recruitment system which includes data entered where the application has not been submitted. Collection and processing of all data submitted by prospective job applicants for the purposes of recruitment which includes any ‘uploaded’ documents and access to Registered Users contact details
Contact : firstname.lastname@example.org – 0161 850 2004
Purpose : Collection and processing of all data submitted by registered users (interested job applicants) which also includes any ‘uploaded’ documents with transfer of this information to the Cabinet Office;
Collection and maintenance of Registered Users contact details for the purposes of job applications, job alerts, password reminders and email correspondence relating to site use
Processing of the personal data – Cabinet Office
The Cabinet Office will use the information provided by you for recruitment and selection, personnel management and for employment purposes in respect of successful candidates. The information you give us will be kept confidential and your personal information will not be disclosed to third parties without your prior consent except where necessary to confirm factual information provided by you; to protect public funds, including the prevention and detection of fraud and/or otherwise required by law.
The information you provide, and obtained from other relevant sources, such as previous employers, professional bodies etc, will be treated confidentially and used by The Cabinet Office to process your application for employment.
The information will be shared with the Department you are applying for employment with and, if you succeed in your application and take up employment with us, it will be used in the administration of your employment. We will, where necessary, check information you supply to us in your application form. Enquiries may be made to determine immigration or work permit status, or to relevant persons such as previous employers or professional bodies
We may also record information about the way you have used our Site to improve the way it operates.
Processing of the personal data – Jobtrain Ltd
Jobtrain Solutions uses the information provided by you for the purposes of transferring this information to the Cabinet Office. Jobtrain Solutions will carry out maintenance of the system and data on the instructions of the Cabinet Office.
The information you give us will be kept confidential and your personal information will not be disclosed to third parties without your prior consent except where required by law.