How can we help you?

Edit Legal Basis for GDPR Configuration

all_tiers.png

Explicit consent is one of two legal bases that your organization can select in order to retain candidate data in Greenhouse Recruiting. In this article, we will cover how to:

Note: By default, Greenhouse Recruiting supports legitimate interest as your organization's legal basis.

 

Edit Legal Basis

To edit the legal basis for your organization's GDPR configuration, click the Configure icon configure.png in the upper right-hand corner and select Privacy & Compliance on the left-hand panel.

Screen_Shot_2020-04-21_at_3.54.36_PM.png

Click Configure inline with the General Data Protection Regulation (GDPR) panel. 

Screen_Shot_2020-04-21_at_4.04.37_PM.png

Navigate to the Legal Basis panel and click Configure.

Screen_Shot_2020-04-21_at_4.08.58_PM.png

Click the button to the left of either Legitimate Interest or Explicit Consent and click Save when finished.

Screen_Shot_2020-04-21_at_4.20.34_PM.png

A dialog box will ask you to confirm the change. Click Change Legal Basis

Screen_Shot_2020-04-22_at_2.19.29_PM.png

 

Impact of Explicit Consent on GDPR Configuration

When explicit consent is used as the legal basis for your organization's GDPR configuration, a question that requests consent will be automatically appended to existing and new job posts for offices with a data retention rule.

Note: This automatically appended question is non-editable. Greenhouse Recruiting will use the {{COMPANY}} token and the {{CANDIDATE_RETENTION_TIMER}} token for the office associated with job.

Screen_Shot_2020-04-22_at_11.45.32_AM.png 

Additionally, an email requesting permission to collect, store, and process candidate data will be automatically sent to anyone under a data retention rule that does not enter through a consent portal. 

Screen_Shot_2020-04-22_at_12.19.46_PM.png

You can also manually request consent from any pre-existing candidate and/or prospect who yes yet to provide consent to have their data collected, stored, and processed. Click the links below to learn more:

 

Impact of Legitimate Interest on GDPR Configuration 

When legitimate interest is used as the legal basis for your organization's GDPR configuration, you will lose Greenhouse Recruiting's built-in consent request functionality.

Since collecting consent is not the legal basis of your GDPR configuration, your organization can customize organizational rules and email templates to automatically email a GDPR notification to candidates and/or prospects who entered into your system without having applied to a job post. 

Screen_Shot_2020-04-22_at_1.47.17_PM.png