<img height="1" width="1" style="display:none" src="https://www.facebook.com/tr?id=555865791448670&amp;ev=PageView&amp;noscript=1">

Hire job fit candidates. Faster.

All Posts

Inteview Mocha-GDPR Readiness

 

General Data Protection Regulation (GDPR) is all set to come into effect on 25th May 2018. GDPR will certainly be a positive move, shedding light on consumer privacy and data security, creating more value for customers. GDPR aims to fortify and unify data protection within the European Union.

GDPR has outlined specific laws and regulations that organizations dealing with citizens/ consumers (data subjects) of EU (European Union) should abide by. The GDPR is all about the rights of the data subjects vis-a-vis their data as well as roles and responsibilities of organizations collecting/ using this data.

Being a pre-employment skill assessment software, the most relevant forms of data for Interview Mocha include personally identifiable information or (PII), which can include people’s name, email addresses, telephone numbers, and any other information that reveals someone’s identity.

Our team at Interview Mocha has worked diligently to ensure that we are compliant with the regulations stipulated by GDPR and have refined our product which in turn empowers our customers to be GDPR compliant as well.

Interview Mocha’s approach to GDPR compliance

For efficient evaluation of candidates, organizations are required to collect identifiable data, essential to building candidate profile. Our customers use Interview Mocha’s assessment platform to assess skills of candidates. Since we process the candidate data on behalf of our customers, we become Data Processors while our customers are Data Controllers. While processing the data for our clients we have ensured that we have complied with GDPR in the below ways:

Rights of Data Subjects

Article 5 of GDPR stipulates personal data can be “collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes (‘lawfulness, fairness and transparency’)”.  In addition to the above, Article 6 of GDPR states the lawful reasons to process data are as below:

  • The data subject has given consent to the processing of his or her personal data for one or more specific purposes;
  • Processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract;
  • Processing is necessary for compliance with a legal obligation to which the controller is subject;
  • Processing is necessary in order to protect the vital interests of the data subject or of another natural person;
  • Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

In accordance with this, Interview Mocha has updated its terms & conditions with messages that clearly mentions how we process information in a fair, transparent, and legal manner with the explicit consent of the data subject.

Interview Mocha has the mechanism in place to honor a data subject’s right to revoke their consent, the right to be forgotten, and rectify the data.

While GDPR states that the data subject can revoke their consent at any time, it also permits this request to be declined by the data controller if the processing of this request is required for legitimate purposes.

Data Management and Processing

Secure Data Processing by design and default:

In compliance with Article 25 of GDPR, we ensure that the highest possible safeguards for Data security have been put in place. All candidate data is secured and encrypted at rest. In addition to this, our assessment platform is designed to process and store information using appropriate security measures.

Data Storage

As per GDPR guidelines, PII data should not be stored indefinitely. Interview Mocha has provided its customers (data controllers) the right to define the length of time their candidates’ personal data is to be stored and when it will be deleted.

Data Transfer

Article 46 of GDPR states that if the customer (data controller) and Interview Mocha (data processor) have entered into a contract, and if the data processor has appropriate security measures in place, the data can be transferred outside EU borders.  Interview Mocha has a standard EU- specific data transfer and processing agreement to ensure compliance with GDPR.

Record Maintenance

Article 30 of GDPR stipulates that each data controller’s representative needs to maintain a record of all activities concerning the personal information of a data subject. Interview Mocha on its part maintains a detailed Audit log which enables its customers to maintain the data record.

Data Breach Notification Process

In accordance with Article 33 of GDPR, any data breach has to be reported to the supervisory authority within 72 hours of the occurrence. Interview Mocha has adequate data monitoring measures to be intimated of any such breach. On discovery of such a breach, Interview Mocha will notify its customers (data controller) within 24 hours. The communication will be sent as per the guideline mentioned in Article 33. This ensures sufficient time for our customers to inform about the breach to the respective authorities.

Data Protection Officer

In keeping up the regulation, we have appointed a Data Protection Officer (DPO) to ensure the protection of data, internal monitoring, and compliance with GDPR. For any GDPR related queries, you can contact our DPO, Neha Kulkarni on support@interviewmocha.com

The way ahead

Interview Mocha is fully GDPR compliant with the requisite changes made in our software to ensure our customers are GDPR compliant as well.

If you have any questions related to our GDPR compliance, please drop us an email on support@interviewmocha.com

Happy Recruiting!
Neha Kulkarni
Neha Kulkarni
Technical writer at Interview Mocha

Topics: Product

Related Posts

Benefits of One Way Video Interview!

Human civilization has had technological advancements one after the other over the years. These advancements have taken over the recruitment industry too. The recruitment industry has come a long way, refining and making its recruitment process more advanced and easier for both candidate and management.

Recruitment Trends To Expect In 2020!

In recent years the recruitment process has evolved and continues to do so! It is all about data-driven recruitment now, with a pinch of human emotions! Many new trends came in the recruitment industry over the past couple of years, years pass and trends change!

Employee Engagement Trends to Watch for in 2020

In a landscape full of expensive work laptops, catered lunch, and other fancy benefits, engaging employees today is harder than ever. Despite these perks, however, the New York Daily reports that 70% of US employees are miserable at work. This is a large indicator of how leaders are still having trouble stimulating engagement with today’s employees, which is a workforce more diverse and younger than ever before. As new developments in technology and social norms occur at such a rapid pace, keeping up with the changing workforce and knowing how to engage employees can get a little difficult. That said, we’ve outlined a few ways you can stay ahead and have listed the incoming employee engagement trends of 2020. Be sustainable The millennial generation, who are in-line to be the next executives, want to work for companies who are sustainable — and the numbers don’t lie. A survey conducted by Swytch found that out of 1,000 employees, 70% are more likely to work for a company that has a strong green footprint, with 30% leaving a company due to not having a corporate sustainability agenda. Fortunately, it’s not that hard for companies to adapt — even using renewable energy is something that most companies can do, as it’s not as hard nor as expensive as it was before. In fact, thanks to decades of improved technology, Marcus notes that it's cheaper than ever to generate power from a solar grid. This is mainly because the cost to make it has lowered, making it possible for solar-powered projects to thrive, and companies to get into sustainability. While it isn’t meant to be a marketing scheme, being sustainable also provides an opportunity for outward marketing and branding as well. Offer remote or flexible work schedules Today’s generation highly values a work-life balance, and by offering remote or flexible work options, you’re fostering a culture that values these principles. This will increase employee retention as they see their employers value the same thing they do. Not to mention, quality of work and productivity will increase as granting them control over their time lets them choose the work times and environments that are best for them. If you want to start offering flexible work schedules, transitioning isn’t as hard as you think. Our article on ‘5 Ways to Effectively Improve Employee Engagement’ explains that you can start by offering telecommuting days, which lets employees work from home for 2 or 3 days a week. Download time-tracking tools and messaging apps such as Slack or Microsoft Teams to make collaborating and transitioning easier. Remember to also train managers to handle their new team of remote/flexible workers, as managing a flexible workforce isn’t the same as a traditional one. Provide opportunities for growth With the current technology, employees have an easier time developing their skillset — but they don’t want to do this without an opportunity to grow. Providing employees a clear path for growth along with some guidance will make them more motivated to reach higher and engage with the company. Without this, employees will become stagnant or feel demotivated as there are no goals to reach within the company. That said, make sure to pair your employees with mentors, or let them know about the next step in the corporate ladder and how to reach it. Provide seminars, give them challenging tasks, and let them have more opportunities to grow through conventions or events. An employee who feels like they’re valued by a company enough for the company to invest in their growth is an engaged one, and there’s no better way to do this than to give them opportunities