• Depends on what their chosen “lawful basis for processing” is. There are differing opinions about whether or not recruitment is a function that can process personal data on the basis of “legitimate interest” ie without consent. It looks like the better informed sources agree that legitimate interest is not justifiable* and that consent is the…[Read more]

  • I did read on another forum that people are plotting to make money out GDPR, hunting for sites that aren’t compliant and suing them? I can imagine ambulance chasing lawyers doing this.

    I’m not sure how that would work. AIUI you would have to demonstrate some kind of detrimental impact eg a monetary or reputational loss in order to sue…[Read more]