A Slack Thread on Privacy Notices

A recent Slack thread caught my attention. One of our recruiters flagged a concern about how our careers page handled applicant data. As the conversation unfolded, it became clear that we needed to ensure our applicant privacy notice was not only compliant with GDPR regulations but also transparent and informative for candidates. This realization set us on a path to revamp our privacy policies.

Understanding the Stakes

The issue of candidate privacy is not just a legal obligation—it's about trust. Candidates are increasingly aware of their rights regarding personal data, especially in the context of recruitment. A vague or incomplete privacy notice might deter potential applicants from engaging with our recruitment process. This concern resonated deeply within our team, particularly among those in recruitment and compliance, as we understood the stakes involved: reputation, trust, and legal repercussions.

The Problem Uncovered

Upon reviewing our existing applicant privacy notice, we found it fell short in several key areas. For instance, it lacked clarity on the lawful basis for processing personal data, which is a fundamental requirement under GDPR. A concrete example arose when an applicant requested information about how their data would be used. Our response was insufficient and left them confused about their rights. This highlighted a critical gap in our communication and made it evident that we needed a structured approach to address these gaps.

Our Initial Attempts

Initially, we considered a simple update to the existing notice. We thought we could just add a few paragraphs about GDPR compliance. However, during discussions, it became clear that this approach wouldn't suffice. A mere patch wouldn't address the underlying issues. Instead, we needed to fundamentally rethink how we communicated our data practices to candidates.

Technical Solutions Implemented

After several brainstorming sessions, we decided to overhaul the entire applicant privacy notice. We drafted a comprehensive document that outlined the lawful bases for processing data, detailed what personal data we collected, and explained how candidates could exercise their rights. The new notice also included sections on talent-pool consent, specifying how applicants could opt-in or out of further communications.

Here’s a snippet of our updated notice:

## Personal Data We Collect
- Name
- Email Address
- CV/Resume
- Interview notes

## Lawful Basis for Processing
We process your personal data based on your consent and our legitimate interests in evaluating your application.

Additionally, we implemented a clear process for candidates to submit deletion requests, ensuring we respected their rights under GDPR.

Observed Changes in Product Interaction

With the new applicant privacy notice live on our careers page, we noticed immediate feedback from candidates. Many appreciated the transparency and clarity about how their data would be used. This led to increased inquiries about our recruitment process, suggesting that candidates felt more comfortable engaging with our platform. Furthermore, our /jobs section saw a notable uptick in applications, likely influenced by the improved trust we established through clearer communication.

Key Takeaways from the Process

• Transparency is critical: Clear communication fosters trust with candidates.
• Legal compliance is not just a checkbox: A robust privacy policy can enhance user experience.
• Iterative feedback is invaluable: Engaging with candidates during the drafting process yielded insights we hadn’t considered.
• Simplicity matters: A straightforward, easy-to-understand notice can alleviate candidate concerns.

Implications for Candidates

For candidates, this revamped privacy notice means a more transparent recruitment process. They can now understand how their data is handled, which enhances their trust in our company. With clear instructions for opting in or out of communications, candidates can make informed decisions about their engagement with us.

Implications for Recruiters

From a recruiter’s perspective, the updated applicant privacy notice simplifies the conversation around data handling. Recruiters can confidently discuss our policies with candidates, knowing that we’ve established a clear and compliant framework. This transparency not only helps in building trust but also positions us as a responsible employer in the eyes of potential hires.

Looking Ahead

While we've made significant strides, we recognize that compliance and transparency are ongoing challenges. We're monitoring the effectiveness of our new privacy notice and watching for feedback from candidates. If we had to redo this process, we would invest even more time in gathering candidate insights early on. As regulations evolve, we also plan to regularly review our policies to ensure they remain compliant and user-friendly.