CERs Data Privacy & Candidate Information Security 3

Question 1

Which GDPR data protection principle specifically requires that personal data held in recruiting systems be factually correct and kept current?

Accepted Answer

Accuracy

Answer

Data minimization

Answer

Storage limitation

Answer

Integrity and confidentiality

Question 2

What does 'pseudonymization' mean when applied to candidate data in a recruiting context?

Accepted Answer

Replacing identifying information with codes or pseudonyms so data cannot be linked to a specific individual without additional information

Answer

Publishing job postings using a company alias to attract passive candidates anonymously

Answer

Creating completely anonymous candidate profiles for blind skills-based assessments

Answer

Storing candidate files under encrypted file names that only the ATS can decrypt

Question 3

Under the FCRA, what must a recruiter or employer complete before ordering a consumer background report on a job candidate?

Accepted Answer

Obtain a separate, written authorization signed by the candidate

Answer

Notify only the hiring manager of the intent to conduct a background investigation

Answer

Submit a formal records request to the U.S. Department of Labor

Answer

Verify the candidate's identity through a government-issued biometric credential

Question 4

Under what conditions is it permissible for a recruiter to share a candidate's personal data with a third-party staffing agency partner?

Accepted Answer

Only with the candidate's explicit prior consent and under a data processing agreement with the agency

Answer

Whenever sharing would expedite the placement and benefit the recruitment process

Answer

Only after the position has been filled and the candidate is no longer active

Answer

Whenever the agency formally requests the information to fulfill a business need

Question 5

What does GDPR's 'right to data portability' entitle a job candidate to receive?

Accepted Answer

A copy of their personal data in a structured, commonly used, machine-readable format

Answer

The ability to physically relocate their candidate file between regional HR offices

Answer

The requirement that all recruitment data be stored on portable encrypted drives

Answer

The ability to transfer their ATS profile directly into a competing employer's system

Question 6

A recruiter suspects that an unauthorized user has accessed candidate profiles in their ATS. What is the appropriate immediate response?

Accepted Answer

Report the incident immediately to IT/security and activate the organization's data breach response plan

Answer

Wait for IT to confirm the breach before taking any action to avoid triggering a false alarm

Answer

Send notifications only to the candidates whose profiles were most likely viewed

Answer

Reset all user passwords without documenting the incident to close the vulnerability quickly

Question 7

Which ongoing practice best demonstrates a recruiter's sustained commitment to candidate data privacy and ethical information management?

Accepted Answer

Conducting regular audits of stored candidate data to verify compliance with privacy policies and purge outdated records

Answer

Collecting comprehensive personal data upfront from all candidates to streamline future hiring decisions

Answer

Sharing candidate profiles broadly with partner organizations to expand available talent pools

Answer

Retaining all candidate data indefinitely in case a suitable role opens in the future