It is the responsibility of the employer to treat all personal information collected from the employee as confidential information and to limit the access to this information within the organization. The employer cannot retain the personal information from the applicant and have to have protective measures just in case there is data breaching. The employer have to give the applicant the opportunity to access their personal information.