On May 25, 2018, a new privacy law called the General Data Protection Regulation (GDPR) took effect in the European Union (EU). GDPR expands the privacy rights of EU individuals and places new obligations on all organizations that market, track, or handle EU citizens’ personal data. As we all know, there are legal requirements to store information regarding individuals who apply for jobs, but the GDPR states an individual has the right to be “forgotten.” This policy creates a conflict, especially for U.S.-based organizations.
In accordance with the dictates of what is personal data, the following identifying factors are labeled as personal data: physical, physiological, genetic, mental, economic, cultural or social identity of a naturalized (EU) citizen. For staffing and hiring, this will include, but is not limited to, background screening checks, copies of driver’s licenses and passports, credit scores and I-9s.
During our last SmartTalks presentation on April 26, I provided an overview of the GDPR and the impact it will have on clients who store data on European (EU) candidates. We’ve been preparing for months in anticipation of this regulation and developing new reports and adding new features to SmartSearch which will automate the necessary tasks to meet the GDPR’s data management requirements and maintain compliance.
The new tools and features are:
SmartSearch users have access to all information in the Release Notes of the GDPR updates posted in the Help area.
The penalties for non-compliance are stiff, so we highly recommend all SmartSearch clients comply with the statutes as prescribed by the regulations set forth by the European Union. The overseers will be looking at compliance for all opt-ins and opt-outs, which means that anyone designated as an EU citizen (currently living in an EU country or who is an EU citizen residing outside an EU country) must be sent a request to stay in the database or to be scrubbed out. Non-confirmation of either choice will constitute non-compliance by the organization seeking a reply.
SmartSearch is dedicated to providing tools and services to help our clients stay in compliance. SmartSearch is certified with PrivacyShield.Gov and is compliant with all data processing requirements of the GDPR.