Applicant Privacy Notice Template for Singapore

When recruiting employees in Singapore, you must comply with the Personal Data Protection Act (PDPA) 2012 by providing job applicants with a clear privacy notice before collecting their personal data. An Applicant Privacy Notice is your legal obligation that explains how you will handle candidates' personal information throughout the recruitment process. This document serves as both a compliance tool and a transparency measure that builds trust with potential employees while protecting your organization from regulatory penalties.

When do you need this document?

You need an Applicant Privacy Notice whenever you collect personal data from job candidates, whether through online applications, CV submissions, interviews, or background checks. This applies to all recruitment activities including direct applications, recruitment agencies, headhunting firms, and internal promotions where additional data is collected. The notice must be provided before or at the time of data collection, not after. If you're conducting video interviews, requesting references, or performing skills assessments that involve personal data, this notice becomes essential. Even temporary or contract positions require this protection, as the PDPA applies to all employment relationships regardless of duration.

Key legal considerations

Your privacy notice must clearly identify what personal data you collect, from basic contact information to sensitive details like educational qualifications, employment history, and reference contacts. You must specify the exact purposes for collecting this data, such as assessing suitability, conducting background checks, or complying with regulatory requirements. The legal basis for processing must be explained, typically relying on legitimate interests for recruitment or legal obligations for certain verification requirements. Data sharing arrangements with third parties like background check providers, recruitment agencies, or reference contacts must be disclosed. Retention periods should specify how long you'll keep successful and unsuccessful candidates' data, with unsuccessful applications typically retained for shorter periods unless candidates consent to future opportunities.

Legal requirements in Singapore

Under the PDPA 2012 and Personal Data Protection Regulations 2021, you must obtain valid consent for data collection and ensure the notice is readily accessible and understandable. The Personal Data Protection Commission (PDPC) requires that privacy notices use plain English and avoid legal jargon that might confuse applicants. You must inform candidates of their rights to access, correct, or withdraw consent for their personal data, along with your contact details for privacy-related queries. The notice should explain data transfer arrangements if information will be shared with overseas entities, requiring additional safeguards under PDPC guidelines. Cross-border data transfers must comply with prescribed countries or adequate protection standards. Regular updates to your privacy notice may be necessary as recruitment practices evolve or regulations change, with notification requirements for material changes affecting how personal data is processed.