How to request Data Deletion of a candidate's information

[CF]

This article will explain the process for actioning Data Deletion requests for candidates with Verifile.

Under Article 17 of the U.K. GDPR (General Data Protection Regulations), individuals possess the right to have their personal information and data erased. It is also known as the 'right to be forgotten'.

The right only applies to data held at the time the request is received. It does not apply to data created in the future.

Please note, Verifile is known as the Data Processor of a candidate's information and you, as the client, are the Data Controller.

As the Data Controller, the individual (your candidate) will need to contact you directly if they wish their data to be removed from the Verifile Client Portal.

Verifile offers 2 routes for Data Deletion/Anonymisation.

The first route is having a Data Retention policy in place, meaning we hold your candidate's data on our system for a set period. If you do not have an agreed data retention policy with Verifile, then your candidate's data will be held indefinitely unless you request an ad hoc data deletion.

The second route is having an ad hoc request for data deletion. In these instances, you will need to email Verifile Client Services Team directly at service@verifile.co.uk with the information of the candidate whose data you would like to be deleted/anonymised.

In both of these instances the request does need to come from you rather than your candidates.

Please kindly note, if your candidate contacts Verifile (the Data Processor) for a data deletion request, we will direct them to you as the Data Controller to make this request.

Once we have received the data deletion request, we will need to confirm that the order is completed and has been paid for on the relevant invoice for that order.

Please note, if the order is still open or has not been paid for, we will be unable to complete the data deletion request until both of these requirements have been met.

RELATED CONTENT

• Art. 17 GDPR – Right to erasure (‘right to be forgotten’) - General Data Protection Regulation (GDPR) (gdpr-info.eu)
• Art. 17 GDPR - Right to erasure ('right to be forgotten') - GDPR.eu
• Right to Erasure
• Data Storage Limits