How long can a recruitment company keep your CV on file?

[Funk]

I've just had an email from a recruitment company regarding a job in an industry I haven't worked in for at least 15 years (I started my sales career in the food industry but have been in IT for years now). It means they must be working off a CV I submitted to them a VERY long time ago and I've had no subsequent contact with them in at least the last 5 or so years as I've been in my current role for over 4 years and the previous one for over 7. I'm not looking at the moment either so my details shouldn't be 'out there' on any sites.

Given the personal nature of the information on a CV are there rules which govern when a recruitment company should purge/delete the data they hold on candidates?

I've emailed back politely instructing them to delete my details and it got me thinking about whether they should've still had them in the first place?

Edited by Funk on Friday 9th September 01:59

[Du1point8]

I still get emails/phone calls about my old CV from 2008/9.

Don't ask and I gave up telling them to stop ringing.

[andy-xr]

Dont believe there's any rule or governing body other than the ICO to be honest. Them having an old CV is usually a reason for them to contact you and ask you for an update/get you to send a new one to them.

Whether you choose to do that I guess is up to you, personally I do the 'going into a tt....unnel.....cant hear....you' and then block them

[Funk]

It's surprising that there's no regulation on the retention of that amount of personal info. Not to mention that within a year it's probably also broadly useless as it's out of date.

They must be really desperate if they're dredging up details from so long ago - the role was of no relevance or interest at all!

[Tonsko]

Just asked a recruitment friend: There is no specific legislation to cover the length of time, but if you request to be removed, they are obligated to do so.

[rog007]

There are rules under the Data Protection Act to protect you and information held by organisations about you:

Everyone responsible for using data has to follow strict rules called ‘data protection principles’. They must make sure the information is:

used fairly and lawfully
used for limited, specifically stated purposes
used in a way that is adequate, relevant and not excessive
accurate
kept for no longer than is absolutely necessary
handled according to people’s data protection rights
kept safe and secure
not transferred outside the European Economic Area without adequate protection


https://www.gov.uk/data-protection/the-data-protec...

In this example, agencies should say somewhere that they keep CVs of unsuccessful candidates in the event another role becomes available that may suit. But they should also give candidates the opportunity to not have this happen and thus not retain their CV.

[The Moose]

Funk said:

It's surprising that there's no regulation on the retention of that amount of personal info. Not to mention that within a year it's probably also broadly useless as it's out of date.

They must be really desperate if they're dredging up details from so long ago - the role was of no relevance or interest at all!

Obviously the fact they have been in touch means it's not too out of date!!

[The Moose]

swerni said:

The Moose said:

Funk said:

It's surprising that there's no regulation on the retention of that amount of personal info. Not to mention that within a year it's probably also broadly useless as it's out of date.

They must be really desperate if they're dredging up details from so long ago - the role was of no relevance or interest at all!

Obviously the fact they have been in touch means it's not too out of date!!

Not necessarily. My wife has has the same mobile number for over 20 years.

I'm not far behind that at 17 years currently I think!

But some of the info is still in date so to speak. I guess the brain-out part of recruitment is all about quantity.