A research center has a legitimate interest in asking job applicants how they heard about a specific position (to maximize effectiveness in advertising jobs), appropriately deletes information of unsuccessful applicants after 3 months (unless consent is obtained to retain longer for future hiring purposes), and can collect information from social media posts made public by the applicant (provided it is limited to what is factual and proportionate to the purpose of collection).
Related Posts
Irish National Police Data Leak Highlights Third-Party Risk
The recent data breach incident involving the Irish National Police. This breach underscores the critical importance of addressing…
Fines for breaches of EU GDPR privacy law spike sevenfold
Fines for GDPR breaches have increased sevenfold to 1.2 billion with EU-US data transfers being a major issue.
Do Not Call: AEPD Spain Fines Telecom €100,000
Telecom company fined €100,000 for unsolicited telemarketing calls to an individual on the do not call list.