"I am a headhunter, what are the impacts of GDPR?"


What is GDPR?

Since May 2018, the General Data Protection Regulation (GDPR) applies toevery company that processes personal data.

The objectives:

  • To make all stakeholders responsible for data processing and quality
  • To protect each citizen in the use and storage of their personal data

Every company must:

  • Implement a privacy and personal data protection policy through technical & organizational measures.
  • Ensure its

    subcontractors

    comply with this policy

It's an opportunity for companies to qualify the data processed and map all the processes being carried out.


What is personal data?

Personal data refers to any information that can identify a person, either directly (name, first name) or indirectly (phone number, digital address, or even an image).

Identification can also be cross-referenced: a male person, of a certain age, working for a specific company for x years.

"Okay, so practically speaking?"

Recruitment agencies process a large amount of personal data through the CV databases they maintain.

As a recruitment agency, you must:

  • Ensure that you obtain the candidate's consent to retain this data
  • Delete personal data upon request from a candidate to withdraw their consent
  • Provide a proof of deletion of personal data
  • Provide an overview of the personal data you hold to the candidate upon request and, if applicable, modify or provide an export

Here are the three most common situations regarding candidate consent:

"How will an ATS help me?"

Here is a non-exhaustive list of expected features in an ATS, which will help you ensure the quality of your CV database:


  • A mapping of processes: Who has access to what? Who can see what? Who can modify what? What are the processes for acquiring, updating, and deleting data?
  • Bulk sending of consent requests
  • Mass data deletion: Anonymization of candidate profiles / Deletion of candidate profiles
  • Export personal data
  • Display traceability data (modification, creation, consultation, connection)
  • Store data in a secure location within the European Union.
"How does Nicoka ATS help you with compliance?"

Nicoka ATS enables you to have qualified, up-to-date, and protected data.


Mass consent and data management

The Nicoka CABS ATS provides you with the list of candidates requiring consent requests or updates. You can then send your consent requests in bulk or delete candidates.



Candidate portal for consent management

Each candidate can decide to accept or withdraw their consent through their portal.


Proof of data deletion

Our ATS allows you to generate proof of data deletion, which you can then communicate if necessary.


To learn more

CNIL - General provisions

CNIL - GDPR
CNIL - Understanding GDPR

CNIL - Rules for personnel management

CNIL - Reference PDF



 Summary