Could someone offer any advice please on the following scenario:
I have a number of job vacancies. If someone expresses interest and sends me their CV, would that count as consent to process their data for the role? If not, should I create a consent form (electronic or otherwise) that they complete alongside sending their CV?
Thank you
DP-Pro
Hi. Its unlikely that CONSENT is a valid basis because without sending a CV, the applicant would unlikely be selected for consideration and CONSENT must not be conditional nor should refusal or withdrawal lead to any detriment. Therefore, you should apply CONTRACT as your lawful basis (the provision of a CV/Application etc. being a requirement / condition of entering into an contract of employment).
Liz
I recently researched a similar situation and came across this article:
https://www.xperthr.co.uk/faq/should-employers-ask-job-applicants-for-consent-to-process-their-data-under-the-uk-gdpr/162845/
I am using legitimate interest having reviewed it.