Privacy Notices & ROPA
---
Current Status
Hosted privacy notices and in-app Records of Processing Activities (ROPA) are not yet available inside URLCV. This page outlines how to stay compliant today and what is planned.
---
What You Can Do Today
- Share your agency privacy notice with candidates outside the platform (email template or link on your site)
- Keep your own record of when each candidate received the notice and the lawful basis you rely on
- Use the GDPR Audit Log and LIA records in URLCV as supporting evidence when sharing candidates
- Apply anonymisation and NDAs on submissions for sensitive roles
- Versioned privacy notices hosted in URLCV with provision tracking per submission
- ROPA entries for each processing activity with review dates and status
- Linking ROPA/LIA records to submissions for tighter evidence gathering
- Include a link to your privacy notice in outreach emails sent alongside URLCV links
- Maintain a simple register (spreadsheet is fine) noting when each candidate received the notice
- Align your LIAs with the processing activities in that register so you can evidence the lawful basis you rely on
- GDPR Audit Trail — Audit logging
- Legitimate Interest Assessments — LIA management
- Consent Management — Consent tracking
---
Planned Coverage
---
Tips for Recruiters
---