Outcomes - Selected Case Summaries
Categories
Excessive data collected by jobs portal
Informal Resolution | 08 June 2021
An individual complained that WORC’s online Jobs Portal required her to provide her own personal data when using the website to set up a profile for her employer.
Our investigation determined that the data controller had a valid legal basis for processing the personal data it required from individuals setting up a personal profile on the platform. However, we found that the extent of the personal data the data controller collected from individuals who were setting up a personal account for the sole purpose of carrying out operational functions on behalf of their employer was excessive.
The data controller agreed to make the necessary technical changes to its online platform to reduce the amount of personal data that is collected from individuals acting on behalf of their employer. The data controller also agreed to develop and publish additional guidance on how to register on the online platform.