CERs Data Privacy & Candidate Information Security 3

Question 1

Which GDPR data protection principle specifically requires that personal data held in recruiting systems be factually correct and kept current?

Accepted Answer

Accuracy

Answer

The accuracy principle under GDPR requires organizations to take reasonable steps to ensure personal data is accurate and to erase or rectify inaccurate data without delay.

Question 2

What does 'pseudonymization' mean when applied to candidate data in a recruiting context?

Accepted Answer

Replacing identifying information with codes or pseudonyms so data cannot be linked to a specific individual without additional information

Answer

Pseudonymization separates identifying data from the rest of a candidate's record, reducing privacy risk while allowing the data to remain useful — it is a recommended safeguard under GDPR.

Question 3

Under the FCRA, what must a recruiter or employer complete before ordering a consumer background report on a job candidate?

Accepted Answer

Obtain a separate, written authorization signed by the candidate

Answer

The FCRA mandates that employers obtain a standalone written disclosure and authorization from the candidate before procuring a consumer report from a reporting agency.

Question 4

Under what conditions is it permissible for a recruiter to share a candidate's personal data with a third-party staffing agency partner?

Accepted Answer

Only with the candidate's explicit prior consent and under a data processing agreement with the agency

Answer

Sharing candidate personal data with third parties requires explicit consent from the candidate and a contractual arrangement ensuring the third party handles the data lawfully.

Question 5

What does GDPR's 'right to data portability' entitle a job candidate to receive?

Accepted Answer

A copy of their personal data in a structured, commonly used, machine-readable format

Answer

The right to data portability allows candidates to obtain and reuse their personal data across different services in a format that is interoperable and machine-readable, such as JSON or CSV.

(CERs) Certified Ethical Recruiters Practice Test

(CERs) Certified Ethical Recruiters Practice Test

CERs Data Privacy & Candidate Information Security 3