I’m an employer currently hiring new staff. What should I do with candidates’ CVs once the recruitment process is over?

As a rule, once the recruitment process has ended, the CVs of applicants who were not hired should be destroyed or deleted without delay. It is not permissible to retain personal data longer than necessary for the purpose for which it was collected.

An exception applies if the candidate has clearly indicated in their application documents that they consent to the storage of their personal information beyond the duration of the recruitment process (e.g., for an additional 12 months). In such cases, the employer is entitled to retain the CV for that extended period.