The law states that when someone’s data is collected, that person needs to be provided with a privacy notice. An Investment management company was fielding job applications, and an employment agency was adding applicants to the Investment management company’s application portal.
The employment agency did not provide their applicant’s contact details and instead where filling it in with the recruiters own details because they did not want to be removed from the employment process and lose out on any fees. As a result, the company was unable to make the privacy notice available to the applicant.
From the situation it was unclear as to whether the employment agency should sign a contract to ensure they delivered the privacy notice, or whether the company should do something else entirely. At Kazient we helped find a solution to this impasse. This predicament also highlights the importance of having strong Data Protection procedures already in place.