How to request Data Deletion of a candidate's information

[CF]

This article will explain the process for actioning Data Deletion requests for candidates with Verifile.

Under Article 17 of the U.K. GDPR (General Data Protection Regulations), individuals possess the right to have their personal information and data erased. This right is also called "the right to be forgotten."

The right applies only to data that we hold when we receive the request. It does not apply to data created in the future.

Please note that Verifile acts as the Data Processor for candidate information, while you, the client, are the Data Controller.

As the Data Controller, the individual (your candidate) will need to contact you directly if they wish their data to be removed from the Verifile client portal.

Verifile offers 2 routes for Data Deletion/Anonymisation.

The first route is having a Data Retention policy in place, meaning we hold your candidate's data on our system for a set period. If you lack an agreed data retention policy with Verifile, we will hold your candidate's data indefinitely unless you request its deletion.

The second route is having an ad hoc request for data deletion. In these instances, you will need to email Verifile's Client Services Team directly at [email protected] with the information of the candidate whose data you would like to be deleted/anonymised.

In both instances, the request needs to come from you rather than from your candidates.

Please kindly note, if your candidate contacts Verifile (the Data Processor) for a data deletion request, we will direct them to you as the Data Controller to make this request.

Once we have received the data deletion request, we will need to confirm that the order is completed and has been paid for on the relevant invoice for that order.

Please note, if the order is still open or has not been paid for, we will be unable to complete the data deletion request until both of these requirements have been met.

RELATED CONTENT

• Art. 17 GDPR – Right to erasure (‘right to be forgotten’) - General Data Protection Regulation (GDPR) (gdpr-info.eu)
• Art. 17 GDPR - Right to erasure ('right to be forgotten') - GDPR.eu
• Right to Erasure
• Data Storage Limits

Whilst we have taken care to ensure that this information is accurate, we update articles regularly. If you feel something is incorrect, please use the feedback buttons below to tell us how we could improve.