Applicant Privacy Notice Template for South Africa

An Applicant Privacy Notice is your organization's formal declaration of how you handle job applicants' personal information during recruitment. Under South Africa's Protection of Personal Information Act (POPIA), you must provide this notice to applicants before or at the time of collecting their personal data, ensuring transparency and building trust in your recruitment process.

When do you need this document?

You need an Applicant Privacy Notice whenever your organization collects personal information from job applicants in South Africa. This applies whether you're conducting online applications, in-person interviews, skills assessments, or background checks. The notice is required for permanent positions, temporary roles, internships, and contractor applications. If you use recruitment agencies or third-party platforms, you still need to ensure applicants receive appropriate privacy information about your data processing activities. Organizations of all sizes, from small businesses to multinational corporations, must comply with this requirement when recruiting in South Africa.

Key legal considerations

Your privacy notice must clearly identify your organization as the responsible party and explain the specific purposes for collecting personal information. You need to specify the types of data you collect, including CV information, contact details, qualifications, references, and any special personal information like criminal background checks or medical assessments. The notice must outline your legal basis for processing under POPIA, whether it's legitimate interest, consent, or legal obligation. You must also explain data retention periods, security measures, and circumstances where information might be shared with third parties like background check providers or recruitment agencies. Most importantly, you need to inform applicants of their rights under POPIA, including access, correction, and objection rights, plus how to contact your Information Officer.

Legal requirements in South Africa

POPIA requires that your privacy notice be written in clear, plain language that applicants can easily understand. You must provide the notice before processing begins, which means it should be included in job advertisements, application forms, or provided at the start of the recruitment process. The notice must contain your organization's contact details, including your Information Officer's information, and explain how applicants can exercise their rights. If you're collecting special personal information, such as health data or criminal records, you need explicit consent and must clearly justify why this information is necessary for the role. Your notice must also comply with the Employment Equity Act requirements and ensure you're not discriminating unfairly. Regular updates to your privacy notice are essential when your data processing practices change or when POPIA regulations are updated.