Data authority sets limits on job application data in Algeria

Employers in Algeria may not collect sensitive personal information from job candidates without a legal reason, under new rules published on Wednesday.

The rules are in deliberation No. 05 of the National Authority for the Protection of Personal Data (ANPDP), Algérie 360 reported.

The rules apply to CVs on paper and in electronic form, including applications sent through recruitment platforms.

They cover every stage of how applications are handled, not only files sent directly to human resources departments.

Processing sensitive data, such as information revealing religion or political opinions, stays banned in principle.

It is allowed only in the cases set by law, under the safeguards in article 18 of law 18-07 on personal data.

A candidate who mentions such information in a CV does not automatically give the recruiter the right to process it.

The same applies when an employer asks for such information to be included in the application file.

Data controllers must avoid asking for sensitive information without a legal basis. They must also delete or hide information that is not needed for recruitment, while keeping files confidential and secure.

Companies and bodies may keep the CVs of rejected candidates for one year at most. The year starts when the recruitment or selection process ends.

After that, the recruiter must delete the CVs and personal data they contain, or destroy them securely, so the information cannot be recovered or accessed.

A different period can apply if another legal text sets a different retention time or allows an extra period.

Candidates are asked to limit the personal information in their CVs to what shows their skills and meets the legal requirements of the post.

All companies and public or private bodies concerned remain under the control of the ANPDP. If they break the law, the authority can take the steps provided for in the regulations.