For recruitment agencies
Every CV is personal data. Handle it like it.
Recruitment agencies hold CVs, ID documents and sometimes DBS details for thousands of candidates. Brightlock Cyber helps you protect them, meet UK GDPR, and answer the security questions clients now ask.
The risks we see most in recruitment agencies
CVs in inboxes and downloads
Candidate documents spread across personal inboxes and laptops are hard to protect and easy to lose.
Sharing without agreement
Sending a CV to a client without the candidate's agreement can break UK GDPR and damage your reputation.
Keeping data too long
Old candidate records and DBS details kept for years increase the damage if you're ever breached.
Checks written for recruitment agencies
Every readiness report covers the five Cyber Essentials controls and UK GDPR. Choose "Recruitment agencies" and we add these extra checks for your industry:
- 1Are candidate CVs and ID documents kept in your recruitment system, not personal inboxes or downloads folders?
- 2Do you always get a candidate's agreement before sending their CV to a client?
- 3Do you delete candidate data you no longer need, and DBS certificate details within six months?
Who's asking for Cyber Essentials?
- Clients' supplier security questionnaires
- Public sector and NHS staffing frameworks
- Candidates asking how their details are used
What you get from Brightlock Cyber
- A free 2-minute health check
- A Brightlock Cyber Score out of 1,000, like a credit score for your cyber security
- Step-by-step fixes for the devices and apps you use
- Policies and tender answers written for your business
- Help from us or a partner if you'd rather not do it alone
Read the guide: Data protection for recruitment agencies: CVs, ID and DBS checks
Find out where you stand in two minutes.
Free, with no sign-up.