Privacy Notices & ROPA
Current Status
Hosted privacy notices and in-app Records of Processing Activities (ROPA) are not yet available inside URLCV. This page outlines how to stay compliant today and what is planned.
What You Can Do Today
- Share your agency privacy notice with candidates outside the platform (email template or link on your site).
- Keep your own record of when each candidate received the notice and the lawful basis you rely on.
- Use the GDPR Audit Log and LIA records in URLCV as supporting evidence when sharing candidates.
- Apply anonymisation and NDAs on submissions for sensitive roles.
- Versioned privacy notices hosted in URLCV with provision tracking per submission.
- ROPA entries for each processing activity with review dates and status.
- Linking ROPA/LIA records to submissions for tighter evidence gathering.
- Include a link to your privacy notice in outreach emails sent alongside URLCV links.
- Maintain a simple register (spreadsheet is fine) noting when each candidate received the notice.
- Align your LIAs with the processing activities in that register so you can evidence the lawful basis you rely on.
- GDPR Audit Trail
- Legitimate Interest Assessments
- Consent Management