Applicant Privacy Notice Template for Ireland

When recruiting in Ireland, you must provide clear information to job applicants about how their personal data will be processed. An Applicant Privacy Notice is your legal obligation under both GDPR and Irish data protection law, serving as a transparency document that builds trust while ensuring compliance throughout your recruitment process.

When do you need this document?

You need an Applicant Privacy Notice whenever you collect personal data from job candidates. This includes online application forms, CV submissions, interview processes, background checks, and reference requests. The notice must be provided at the point of data collection - typically when candidates first submit their application or before their interview. If you're conducting pre-employment screening, collecting references, or requesting additional documentation like proof of eligibility to work, you must ensure candidates have received and understood your privacy notice. This requirement applies whether you're a multinational corporation, SME, recruitment agency, or public sector organisation conducting hiring activities in Ireland.

Key legal considerations

Your privacy notice must clearly identify the lawful basis for processing under GDPR Article 6, commonly legitimate interest for recruitment purposes or contract performance for successful candidates. You must specify data retention periods, explaining how long you'll keep unsuccessful applications (typically 6-12 months) versus successful candidate records. The notice should detail any third-party sharing, including background check providers, recruitment agencies, or reference contacts. You must outline applicant rights including access, rectification, erasure, and objection rights, plus provide clear contact details for your organisation and Data Protection Officer if appointed. Special category data like health information or criminal records requires additional legal bases under GDPR Article 9, and you must be transparent about any automated decision-making or profiling in your selection process.

Legal requirements in Ireland

Under Ireland's Data Protection Act 2018, your privacy notice must comply with Data Protection Commission guidance on recruitment processing. You must ensure fair processing principles are met, particularly when handling sensitive personal data related to protected characteristics under the Employment Equality Acts. If conducting criminal background checks, you must comply with the Criminal Justice (Spent Convictions and Certain Disclosures) Act 2016, clearly explaining the scope and necessity of such checks. Irish law requires you to implement appropriate technical and organisational measures to protect applicant data, and your privacy notice should reflect these security commitments. The notice must be easily accessible, written in clear language, and available in multiple formats if needed to ensure all applicants can understand their rights and your processing activities.