What is GDPR?

• The General Data Protection Regulation (GDPR) is a broad set of rules relating to the protection, transfer, and retention of EU-originated personal data.
• It went into effect on May 25,2018.

Who does GDPR impact?

• GDPR applies to data controllers (who collect data of EU data subjects) and data processors (who process data on behalf of a data controller).
• GDPR applies to both organizations within the EU, as well as those located elsewhere, who are collecting or processing data on EU data subjects.
• Whether or not GDPR applies to you, you are required to consult with your legal advisors.

What are data processors and controllers?

• Under GDPR, our customers are data controllers for two reasons:
  • First, you are determining the purpose for which and the manner in which any personal data is being collected.
  • Second, you are also determining the means of the processing of personal data. For example, you are determining that data of a particular applicant should be collected for the purpose of evaluating such applicant for a particular job opportunity.
• Under GDPR, Recruiting is a data processor because you selected us to process the applicant’s data in connection with your use of our products.

What else is Recruiting doing for privacy laws?
We provide several security-related processes to safeguard the data of users of our products such as:

• The pseudonymization and encryption of personal data.
• Safeguarding confidentiality, integrity, availability, and resilience of processing systems and services.
• The ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident.
• A process for regularly testing, assessing and evaluating the effectiveness of technical and organizational measures for ensuring the security of the processing.

Our efforts to adhere to GDPR reflect our ongoing commitment to provide employers with simple, smart, and safe recruiting software.