In Finland (legislation and society modeled from Germany), you are not allowed to acquire personal information from third parties, like internet in general, wit

In Finland (legislation and society modeled from Germany), you are not allowed to acquire personal information from third parties, like internet in general, without applicant's consent. Only the information provided by the candidate and his/her criminal and credit records (if applicable - mostly not) can be searched without explicit permission. Proving foul play is of course nearly impossible. Examples: * Internet search results as a basis of decision on recruiting is illegal if there is no permission from the candidate * Facebook profile picture is "unnecessary personal information in relation to employment" no matter what the job might be * You are not allowed to use unnecessary personal information like the Facebook profile picture even if the candidate gives a permission This legislation is based on a belief that an employee should know what kind of personal information about him/her is being gathered. Employer is required to notify employee/candidate about the intent on acquiring personal information from external source. Second notification is needed before using the sourced data as a basis of decision making on the candidate. Personal Data Act (523/1999): http://www.tietosuoja.fi/uploads/hopxtvf.HTM http://www.tietosuoja.fi/uploads/hopxtvf.HTM The Office of the Data Protection Ombudsman: http://www.tietosuoja.fi/27305.htm http://www.tietosuoja.fi/27305.htm