Recruitment Privacy Notice Template for South Africa

A Recruitment Privacy Notice is a critical legal document that protects both employers and job applicants during the hiring process in South Africa. Under the Protection of Personal Information Act (POPIA), you must provide this notice to candidates before collecting any personal information, ensuring transparency about how their data will be processed, stored, and used throughout recruitment.

When do you need this document?

You need a Recruitment Privacy Notice whenever you collect personal information from job applicants, whether through online applications, CV submissions, interviews, or assessment processes. This includes when engaging recruitment agencies, conducting background checks, or using third-party assessment providers. The notice is mandatory before collecting any personal information, including basic contact details, employment history, educational qualifications, and particularly special personal information such as race or disability status required for employment equity compliance. You also need this notice when transferring candidate data to other parties involved in the recruitment process.

Key legal considerations

Your notice must clearly identify your organization as the responsible party and specify the types of personal information collected, including CV details, interview notes, assessment results, and reference checks. You must explain the purpose of collection, such as evaluating suitability for employment, conducting background verification, and meeting employment equity requirements. The document should outline your legal basis for processing under POPIA, whether it's legitimate interest, consent, or legal obligation. Include retention periods for candidate data, specifying how long information will be stored for successful and unsuccessful applicants. Address third-party sharing arrangements with recruitment agencies, background check providers, and assessment companies, ensuring candidates understand who may access their information and why.

Legal requirements in South Africa

Under POPIA, your Recruitment Privacy Notice must be provided before or at the time of collecting personal information and must be easily accessible and understandable. The notice must comply with Section 18 of POPIA regarding notification requirements and include specific details about cross-border transfers if candidate data is processed outside South Africa. You must address the collection of special personal information, particularly race data required under the Employment Equity Act, explaining the legal basis and safeguards in place. The document should clearly outline candidates' rights under POPIA, including access, correction, deletion, and objection rights, plus contact details for your Information Officer. Ensure compliance with both POPIA's general processing conditions and specific requirements for employment-related data processing, including provisions for automated decision-making if applicable to your recruitment process.