applicant profile. Sara can also request to see and verify the lawfulness of processing (see above). PeopleAdmin also retains comprehensive reporting on the processing of candidate information, any of which can be requested and contested for lawfulness by an applicant. Modification Just as she can request to delete or access her data, Sara can ask your Sara can easily modify personal data if it’s institution to modify her personal data if it’s inaccurate or incomplete. inaccurate or incomplete by updating her If and when she does, you need to be able to accommodate that candidate or applicant profile. modification request. One type of lawful basis of processing is consent with proper notice. Consent PeopleAdmin provides highly configurable In order for Sara to grant consent under the GDPR, a few things need form views and instructional text options for to happen: your institution’s applications. In order to update the certification statement on your • She needs to be told what she’s opting into. application, you may edit it in the Admin • She needs to affirmatively opt-in. Module, in the General Setup dropdown, in the “Position Type Settings” feature. • The consent needs to be granular, meaning it needs to cover the various ways you process and use Sara’s personal data (e.g. marketing To modify any instructional text to ensure email or sales calls). that you have provided EU citizens the information necessary to provide informed consent, please contact PeopleAdmin support to modify your forms and instructional text. Security Measures The GDPR requires a slew of data protection safeguards, from PeopleAdmin takes data security very encryption at rest and in transit to access controls to data seriously. Please review our data security pseudonymization and anonymization. policy online at www.peopleadmin.com/privacy You need to have a legal reason to use Sara’s data. Lawful basis of processing PeopleAdmin provides your institution the ability to configure application forms and instructional text to ensure you clearly
Sara can also request to see and verify the lawfulness of processing (see above). applicant profile. PeopleAdmin also retains comprehensive reporting on the processing of candidate information, any of which can be requested and contested for lawfulness by an applicant. Modification Just as she can request to delete or access her data, Sara can ask your institution to modify her personal data if it’s inaccurate or incomplete. If and when she does, you need to be able to accommodate that modification request. Sara can easily modify personal data if it’s inaccurate or incomplete by updating her candidate or applicant profile. Consent One type of lawful basis of processing is consent with proper notice. In order for Sara to grant consent under the GDPR, a few things need to happen: • She needs to be told what she’s opting into. • She needs to affirmatively opt-in. • The consent needs to be granular, meaning it needs to cover the various ways you process and use Sara’s personal data (e.g. marketing email or sales calls). PeopleAdmin provides highly configurable form views and instructional text options for your institution’s applications. In order to update the certification statement on your application, you may edit it in the Admin Module, in the General Setup dropdown, in the “Position Type Settings” feature. To modify any instructional text to ensure that you have provided EU citizens the information necessary to provide informed consent, please contact PeopleAdmin support to modify your forms and instructional text. Security Measures The GDPR requires a slew of data protection safeguards, from encryption at rest and in transit to access controls to data pseudonymization and anonymization. PeopleAdmin takes data security very seriously. Please review our data security policy online at www.peopleadmin.com/privacy Lawful basis of processing You need to have a legal reason to use Sara’s data. PeopleAdmin provides your institution the ability to configure application forms and instructional text to ensure you clearly
GDPRCompliance_FAQ.docx