Recruitment Privacy Notice Template for Ireland

A Recruitment Privacy Notice is a legally required document that informs job applicants about how your organization processes their personal data during the hiring process. Under Irish data protection law, you must provide this notice before collecting any personal information from candidates, ensuring transparency and compliance with both GDPR and the Data Protection Act 2018.

When do you need this document?

You need a Recruitment Privacy Notice whenever you conduct hiring activities in Ireland, whether you're a local company or an international organization with Irish operations. This includes posting job advertisements, reviewing CVs, conducting interviews, performing background checks, or engaging recruitment agencies. The notice must be provided before you collect any personal data from applicants, typically alongside job application forms or during initial contact. Multinational companies with Irish subsidiaries particularly need this document to ensure consistent data protection practices across their European operations. Even if you use third-party recruitment agencies, you remain responsible for ensuring candidates receive appropriate privacy information about your data processing activities.

Key legal considerations

Your Recruitment Privacy Notice must clearly identify your legal basis for processing personal data under GDPR, typically legitimate interests for recruitment purposes. The document must specify what types of personal data you collect, including basic contact information, employment history, qualifications, and any special category data like health information for occupational health assessments. You must explain how long you retain candidate data, distinguishing between successful and unsuccessful applicants, and describe data sharing with third parties such as background check providers or recruitment agencies. The notice should detail candidates' rights under GDPR, including access, rectification, erasure, and portability rights, along with clear contact information for your Data Protection Officer or designated representative. International data transfers require specific disclosure if you share candidate information with entities outside the EU.

Legal requirements in Ireland

Under the Data Protection Act 2018, Irish employers must ensure their recruitment practices comply with additional national requirements beyond GDPR. The Employment Equality Acts 1998-2015 restrict what personal information you can collect, prohibiting questions about pregnancy, family status, sexual orientation, and other protected characteristics unless directly relevant to job requirements. The Criminal Justice (Spent Convictions and Certain Disclosures) Act 2016 limits when you can request criminal history information and requires specific procedures for handling such data. Your notice must reference the Data Protection Commission as the relevant supervisory authority and include their contact details for complaint procedures. Irish law also requires you to implement appropriate technical and organizational measures to protect candidate data, which should be referenced in your privacy notice to demonstrate your commitment to data security throughout the recruitment process.