> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://help.100hires.com/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# GDPR Compliance Settings

# GDPR Compliance Settings

This article explains how to configure 100Hires for GDPR compliance. Use these settings to manage candidate data retention, consent tracking, and privacy policy integration with your career site.

## Enabling GDPR

1. Go to [**Settings** / **GDPR**](https://app.100hires.com/settings/gdpr)
2. Toggle **"Do you want to enable GDPR?"** on ![GDPR Compliance Settings: Enabling GDPR](https://storage.crisp.chat/users/helpdesk/website/-/4/f/a/a/4faab8f2b2ab0400/gdpr-compliance-setting-1_222q3u.png)
3. Configure the settings below
4. Save

## GDPR settings

### Data Retention Period

Set how long you keep candidate data (1-60 months). After this period:
* Consent expires
* Auto-delete can trigger (if enabled)
* Consent renewal requests can be sent (if enabled)

### Privacy Policy URL

Enter your company's privacy policy URL. This link:
* Appears on consent request pages
* Is required for GDPR compliance
* Should explain how you handle candidate data

### Show in Footer

Enable to display the privacy policy link on your career site footer.

### Auto-Delete

When enabled, the system automatically deletes candidates whose consent has expired after the retention period.

### Auto-Send Consent Requests

When enabled, the system automatically sends consent renewal emails to candidates before their consent expires.

## Managing Candidate Consent

### Viewing Consent Status

On candidate profiles, the **GDPR dropdown** shows current consent status.

### Requesting Consent

1. Open candidate profile
2. Click **GDPR dropdown** ![GDPR Compliance Settings: Requesting Consent](https://storage.crisp.chat/users/helpdesk/website/-/4/f/a/a/4faab8f2b2ab0400/gdpr-compliance-setting-2_1mr6uzd.png)
3. Select **Request consent**
4. Candidate receives email with consent options

### Manual Consent Update

1. Open candidate profile
2. Click **GDPR dropdown**
3. Select the appropriate consent status

### Removing Candidate Data

For "right to be forgotten" requests:

1. Open candidate profile
2. Click **GDPR dropdown**
3. Select **Remove candidate profile** ![GDPR Compliance Settings: Removing Candidate Data](https://storage.crisp.chat/users/helpdesk/website/-/4/f/a/a/4faab8f2b2ab0400/gdpr-compliance-setting-3_xnjfvb.png)
4. All candidate data is deleted

## Consent Request Email

When candidates receive consent requests, they see:
* Your company name
* Retention period you've set
* Link to your privacy policy
* Options to accept or decline

## Bulk GDPR actions
![GDPR Compliance Settings: Bulk GDPR actions](https://storage.crisp.chat/users/helpdesk/website/-/4/f/a/a/4faab8f2b2ab0400/gdpr-compliance-setting-4_16rbrfx.png)
Select multiple candidates to:
* Request consent in bulk
* Update consent status
* Export for data requests

## Best Practices

* Set retention period appropriate to your hiring cycles
* Keep privacy policy current
* Respond promptly to data requests
* Document consent for compliance audits
* Enable auto-send to maintain valid consent

## GDPR and job boards

When candidates apply through Indeed or other job boards:
* Initial consent is implied through application
* You should still request explicit consent for long-term data retention
* Respect opt-out requests promptly