Candidates get a GDPR status based on the data retention period set up in your account. The status indicates if you have their consent to store their data and when it will expire.

📌 To manage candidates’ GDPR statuses, your hiring role must have permission to Manage candidates.

In this article:

You can see your candidates’ GDPR status with a single glance at the badge in their profile or in the Candidates section. The badge will be red if the status is No consent, the retention period is expired, or it will expire in less than 14 days. You can also see when the retention period will expire in brackets behind the status.

No consent

This candidate was added to the database without giving consent to store their data.

Consent requested

A consent request has been sent to the candidate.

Consent given

The candidate has consented to you storing their data.

Expiring

The candidate’s retention period will expire in less than 30 days.

Expired

The candidate’s retention period has expired.

When you click on a badge in a candidate profile, actions will appear depending on the candidate’s GDPR status. You can send the candidate an email, extend their retention period, or delete the candidate.

If you want an overview of your database, go to the Candidates section and select the GDPR compliance filter. Here, all candidates with the status Expiring or Awaiting consent, as well as with removal or correction requests, are listed. You can see their GDPR status and the time left in their retention period.

💡 You can also access this filter within a job or talent pool under Filters.

1. Select the checkboxes next to candidates on the left, select More, and/or click Extend retention.

2. Select for how long you would like to extend the retention period of the selected candidates.

3. Click Extend.

💡 When extending retention periods manually, candidates will automatically get the status Consent given or Expiring depending on the number of days you are extending the retention period.