{"id":4985,"date":"2026-07-31T08:14:00","date_gmt":"2026-07-31T06:14:00","guid":{"rendered":"https:\/\/bymconsulting.se\/?p=4985"},"modified":"2026-07-24T13:42:13","modified_gmt":"2026-07-24T11:42:13","slug":"gdpr-hr-rekrytering-2026","status":"publish","type":"post","link":"https:\/\/bymconsulting.se\/en\/gdpr-hr-rekrytering-2026\/","title":{"rendered":"GDPR in HR \u2014 what you actually need to have in order in 2026."},"content":{"rendered":"
\n

GDPR has been in force since 2018. That does not mean everyone has it under control.

In most companies I work with, there are gaps. Simply because other things took priority \u2014 and nobody quite knew whose responsibility it was.
The problem is that it is often the HR function that is responsible. And the HR function does not always know it.

Three common GDPR mistakes in the recruitment process<\/strong><\/p>\n\n\n\n

    \n
  1. Candidate data is stored longer than permitted
    You are entitled to process a candidate's details during the recruitment process \u2014 typically on the basis of legitimate interest. What most people miss is that storing data beyond that, for example in a candidate database, requires a new and documented legal basis.\nAnd consent is rarely a valid option here. Because of the power imbalance between employer and candidate, consent in a recruitment context can seldom be considered genuinely voluntary.
    Do you have a data retention policy for candidate information? If the answer is no \u2014 that is a problem.
    <\/li>\n\n\n\n
  2. No clear purpose for data collection
    GDPR requires a specific and documented purpose for every piece of data you collect. 'Recruitment purposes' is not specific enough.
    Why are you collecting this particular information? What is it used for? How long do you need it? You should be able to answer all of these.
    <\/li>\n\n\n\n
  3. Candidates are not properly informed of their rights
    Kandidater har r\u00e4tt att veta hur deras uppgifter behandlas. Det inneb\u00e4r en integritetspolicy anpassad f\u00f6r recruitment<\/a>, information om hur l\u00e4nge data lagras och vart kandidaten kan v\u00e4nda sig med fr\u00e5gor.
    Finns det p\u00e5 er karri\u00e4rsida eller i er     rekryteringsprocess<\/a>? Det borde det g\u00f6ra.<\/li>\n<\/ol>\n\n\n\n


    What you should do now<\/strong>
    \u2022\tReview your data retention policy for candidate information
    \u2022\tCheck that your privacy policy covers the recruitment process
    \u2022\tAudit what personal data you actually collect and why
    \u2022\tMake sure everyone who handles candidate data knows the rules

    It does not have to be complicated. But it does have to be done.

    One final thought<\/strong>
    GDPR i     HR<\/a> handlar i grunden om respekt. Respekt f\u00f6r kandidaternas integritet. Respekt f\u00f6r deras uppgifter. Respekt f\u00f6r att de delar med sig av personlig information i en situation d\u00e4r de \u00e4r s\u00e5rbara.

    Compliance is a minimum. The right attitude is the goal.

    If you have thoughts, questions, or simply want to talk something through \u2014 feel free to get in touch. I am happy to have an initial conversation with no agenda.<\/em><\/p>\n\n\n\n

    \"\"<\/figure>\n\n\n\n

    Magdalena Hagstr\u00f6m St\u00e5hl
    By M Consulting AB<\/p>\n\n\n\n

    Right person. Right place. Everything changes.<\/em>
    <\/p>\n\n\n\n

    Sources:
    IT-Juridik.se \u2014 HR data, recruitment and GDPR \u2013 specific rules 2025\nit-juridik.se\/hr-data-rekrytering-och-gdpr
    Bakgrundsanalys.se \u2014 GDPR and the legal basis for background checks in recruitment (January 2026)\nbakgrundsanalys.se\/lagstiftning-for-bakgrundskontroller
    Simployer \u2014 Are you recruiting? Do you have a legal basis under GDPR?\nsimployer.se\/artiklar\/du-som-rekryterar-har-du-en-laglig-grund-enligt-gdpr
    Swedish Authority for Privacy Protection (IMY) \u2014 Data protection in recruitment\nimy.se<\/em><\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"

    GDPR has been in place since 2018 \u2013 but most companies still have gaps. Three common mistakes in the recruitment process, and what you concretely need to do about it.<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[39],"tags":[],"class_list":["post-4985","post","type-post","status-publish","format-standard","hentry","category-aktuellt"],"_links":{"self":[{"href":"https:\/\/bymconsulting.se\/en\/wp-json\/wp\/v2\/posts\/4985","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bymconsulting.se\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bymconsulting.se\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bymconsulting.se\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bymconsulting.se\/en\/wp-json\/wp\/v2\/comments?post=4985"}],"version-history":[{"count":6,"href":"https:\/\/bymconsulting.se\/en\/wp-json\/wp\/v2\/posts\/4985\/revisions"}],"predecessor-version":[{"id":5253,"href":"https:\/\/bymconsulting.se\/en\/wp-json\/wp\/v2\/posts\/4985\/revisions\/5253"}],"wp:attachment":[{"href":"https:\/\/bymconsulting.se\/en\/wp-json\/wp\/v2\/media?parent=4985"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bymconsulting.se\/en\/wp-json\/wp\/v2\/categories?post=4985"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bymconsulting.se\/en\/wp-json\/wp\/v2\/tags?post=4985"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}