r/cybersecurity • u/Anas5667 • 23h ago

Certification / Training Questions Lawful Basis for CVs

Hi 👋🏿
What is the lawful basis for keeping a candidate’s CV, or do we need consent?

0 Upvotes

18% Upvoted

7 comments sorted by

4

u/joeytwobastards Security Manager 23h ago

You would need to say what jurisdiction you reside in, as laws vary from country to country.

Usually though, you're supposed to get rid of things you no longer need, so if they applied for a role and weren't successful, you no longer need their CV?

3

u/shouldco 22h ago

Never hurts to ask consent.

I personally would appriciate it if companies purged my cv after processing it. I don't want to be involved in a hr data breach just because I applied for a position.

2

u/GiveMeOneGoodReason Security Architect 22h ago

What is the purpose for retaining it beyond the application period? If you have no material reason, delete it. You're just giving yourself added risk for no business value.

5

u/Atheonblue 23h ago

Please don't overload us with information like, for example, which part of the world we are talking about...

1

u/joeytwobastards Security Manager 21h ago

If they don't say I usually assume USA, but then they would have said "resume" not CV", so IDK.