3 ms·

> Just being able to read interview feedback is enough to recognize who wrote it. While that might be true internally, I think it's pretty unlikely that a cand

> Just being able to read interview feedback is enough to recognize who wrote it. While that might be true internally, I think it's pretty unlikely that a candidate had enough of a sense of each person's writing style (especially if the interview was conducted via voice, as is typical) > So I do think that companies shouldn't really have anticipated this when they formed their expecftations, unless they were formed after GDPR was approved. The GDPR was passed in 2016. I feel like 5+ years is plenty of time to re-adjust expectations.

dekhn 5y ago
At this time, I believe that the law (either GDPR or CCPA) itself does not require companies to disclose confidential interview notes. Certainly when I worked at Google during GDPR they reorganized massive amounts of data storage to comply with that, but I don't recall anybody doing hiring saying GDPR applied. From I can tell a random throwaway made this post on reddit, it may have happened, but it doesn't mean that companies are required to do this. I would like to see more supporting data.
- x0x0 5y ago
  GDPR very explicitly applies; see eg ICO (the UK DPA) guidance, or this: https://www.dickinson-wright.com/news-alerts/the-gdpr-covers-employee-hr-data-and-tricky https://www.dickinson-wright.com/news-alerts/the-gdpr-covers... As I mentioned above, CA privacy laws exclude this information.
  - deleted 5y ago
    [deleted]
  - dekhn 5y ago
    That's for employee, not applicant data, though.
- detaro 5y ago
  ok, in my comments I glossed over the fact that you specifically argued about the interview notes a bit, which maybe are not as clear as other data points. But that on the other hand that applicant data is personal data that falls under GDPR and that applicants can request their data is quite obvious, and that notes contain "personal data" about a person is also established, so you'd really need a specific argument why they don't fall under the access request requirement. At least in the German case law I've seen, it's by now established that internal notes etc about a person also count specifically for the data access request - a prominent case was someone suing their insurance company for all internal records.

dekhn 5y ago

At this time, I believe that the law (either GDPR or CCPA) itself does not require companies to disclose confidential interview notes. Certainly when I worked at Google during GDPR they reorganized massive amounts of data storage to comply with that, but I don't recall anybody doing hiring saying GDPR applied. From I can tell a random throwaway made this post on reddit, it may have happened, but it doesn't mean that companies are required to do this. I would like to see more supporting data.

x0x0 5y ago
GDPR very explicitly applies; see eg ICO (the UK DPA) guidance, or this: https://www.dickinson-wright.com/news-alerts/the-gdpr-covers-employee-hr-data-and-tricky https://www.dickinson-wright.com/news-alerts/the-gdpr-covers... As I mentioned above, CA privacy laws exclude this information.
- deleted 5y ago
  [deleted]
- dekhn 5y ago
  That's for employee, not applicant data, though.
detaro 5y ago
ok, in my comments I glossed over the fact that you specifically argued about the interview notes a bit, which maybe are not as clear as other data points. But that on the other hand that applicant data is personal data that falls under GDPR and that applicants can request their data is quite obvious, and that notes contain "personal data" about a person is also established, so you'd really need a specific argument why they don't fall under the access request requirement. At least in the German case law I've seen, it's by now established that internal notes etc about a person also count specifically for the data access request - a prominent case was someone suing their insurance company for all internal records.