Under the EU General Data Protection Regulation (GDPR), what must an international recruiter establish before processing a non-EU candidate's personal data collected through an EU-based platform?
-
A
A signed NDA with the candidate
-
B
A lawful basis for processing such as consent or legitimate interest
-
C
Approval from the candidate's national labor ministry
-
D
A formal partnership with a GDPR-certified data broker