The General Data Protection Regulation is a European-wide law that replaces the Data Protection Act 1998 in the UK. It places greater obligations on how organisations handle personal data. It came into effect on 25 May 2018. Even though the UK is no longer part of the EU, we are still required to handle data with respect to this legislation. ‘Personal data’,
In line with GDPR, we only keep applicant data for as long as necessary, and we only keep data that is strictly related to the purpose for which we need it. The specific amount, type and length of time we keep data varies per client, applicant, screening type being undertaken and the nature of the contract in place with our