Note: In order to utilize Greenhouse Recruiting's built-in request consent functionality, your organization will need to have selected explicit consent as the legal basis for your GDPR configuration.
If you edit the legal basis for your organization to explicit consent, your organization will need to request consent from any candidate and/or prospect who existed in your account prior to the edit. In this article, we will cover how to request consent from multiple candidates to collect, store, and process their data using Greenhouse Recruiting's bulk action feature.
Click the All Candidates tab on the navigation bar.
From the All Candidates page, expand Profile Details on the left-hand panel.
Navigate to GDPR Status and select Consent not requested from the dropdown menu.
The list of candidates will be filtered to only individuals who have not yet given consent to have their data collected, stored, and processed.
Click Bulk Actions and select users who will be sent a consent request email.
When finished, click Edit Selected.
From the bulk action dialog box, click Request Candidate Consent.
A subsequent dialog box will ask you to confirm the bulk action. Click Request Consent.
An email requesting consent will be sent to all candidates included in the bulk action. Buttons to give or deny consent will be append to end of the email.
Candidates and/or prospects will have 30 days to either give or deny consent. This window of time is non-editable. Please refer to the table below for an overview of how consent will impact an individual candidate's profile:
| Scenario | Action |
| Gives Consent | Your organization can retain the candidate's or prospect's data in accordance with your organization's data retention rules. |
| Denies Consent | The candidate or prospect will be immediately queued to have their data deleted from your account |
| Does Not Respond | The candidate or prospect will have 30 days to respond to consent request email. If the candidate or prospect does not respond in 30 days, they will be queued to have their data deleted from your account. |