Articles on: Support

GDPR Compliance Settings

This article explains how to configure 100Hires for GDPR compliance. Use these settings to manage candidate data retention, consent tracking, and privacy policy integration with your career site.


Enabling GDPR


  1. Go to Settings / GDPR
  2. Toggle "Do you want to enable GDPR?" on
  3. Configure the settings below
  4. Save


GDPR settings


Data Retention Period


Set how long you keep candidate data (1-60 months). After this period:

  • Consent expires
  • Auto-delete can trigger (if enabled)
  • Consent renewal requests can be sent (if enabled)


Privacy Policy URL


Enter your company's privacy policy URL. This link:

  • Appears on consent request pages
  • Is required for GDPR compliance
  • Should explain how you handle candidate data



Enable to display the privacy policy link on your career site footer.


Auto-Delete


When enabled, the system automatically deletes candidates whose consent has expired after the retention period.



When enabled, the system automatically sends consent renewal emails to candidates before their consent expires.




On candidate profiles, the GDPR dropdown shows current consent status.



  1. Open candidate profile
  2. Click GDPR dropdown
  3. Select Request consent
  4. Candidate receives email with consent options



  1. Open candidate profile
  2. Click GDPR dropdown
  3. Select the appropriate consent status


Removing Candidate Data


For "right to be forgotten" requests:


  1. Open candidate profile
  2. Click GDPR dropdown
  3. Select Remove candidate profile
  4. All candidate data is deleted



When candidates receive consent requests, they see:

  • Your company name
  • Retention period you've set
  • Link to your privacy policy
  • Options to accept or decline


Bulk GDPR actions

Select multiple candidates to:

  • Request consent in bulk
  • Update consent status
  • Export for data requests


Best Practices


  • Set retention period appropriate to your hiring cycles
  • Keep privacy policy current
  • Respond promptly to data requests
  • Document consent for compliance audits
  • Enable auto-send to maintain valid consent


GDPR and job boards


When candidates apply through Indeed or other job boards:

  • Initial consent is implied through application
  • You should still request explicit consent for long-term data retention
  • Respect opt-out requests promptly

Updated on: 27/12/2025

Was this article helpful?

Share your feedback

Cancel

Thank you!