Note: In order to utilize Greenhouse Recruiting's built-in request consent functionality, your organization will need to have selected explicit consent as the legal basis for your GDPR configuration.
If you edit the legal basis for your organization to explicit consent, your organization will need to request consent from any candidate and / or prospect who existed in your account prior to the edit.
In this article, we will cover how to request consent from multiple candidates to collect, store, and process their data using Greenhouse Recruiting's bulk action feature.
To request consent from candidates in bulk, click Candidates on your navigation bar.
From the All Candidates page, expand Profile Details on the left.
Scroll to GDPR Status and select Consent not requested from the dropdown.
The list of candidates will be filtered to only individuals who have not yet given consent to have their data collected, stored, and processed.
Click Bulk Actions and select users who will be sent a consent request email.
When finished, click Edit Selected.
From the bulk action dialog box, click Request Candidate Consent.
A subsequent box will ask you to confirm the bulk action. Click Request Consent.
An email requesting consent will be sent to all candidates included in the bulk action.
The opportunity for the candidates to Give Consent or Deny Consent will be appended to the end of the email.
Candidates and / or prospects will have 30 days to either give or deny consent. This window of time is non-editable.
You can refer to the table below for an overview of how consent will impact an individual candidate's profile:
| Scenario | Action |
| Gives consent | Your organization can retain the candidate's or prospect's data in accordance with your organization's data retention rules. |
| Denies consent | The candidate or prospect will be immediately queued to have their data deleted from your account |
| Does not respond | The candidate or prospect will have 30 days to respond to the consent request email. If the candidate or prospect does not respond in 30 days, they will be queued to have their data deleted from your account. |