Is it IT? Legal? HR? Retention needs ownership — or it becomes a shared blind spot. Here’s how to assign responsibility. Without a clear owner, data retention becomes everyone’s responsibility — and no one’s priority. Ownership models that work: Either model can work — but only if: Assigning ownership turns policy into practice. Without it,…
Storing CVs for years after rejection? It might be a data protection breach. Here’s what you need to know. It’s common for recruitment teams to keep CVs “just in case” — but under UK GDPR, this can be unlawful. The problem: If a candidate wasn’t hired, their data must only be retained if you have…
In today’s competitive talent market, recruitment teams often gather as much candidate information as possible — but in doing so, they may inadvertently breach UK data protection law. Under the UK GDPR and the Data Protection Act 2018, organisations must only collect personal data that is adequate, relevant, and limited to what is necessary. Yet…