France: Issued CNIL notice regarding data minimisation in the recruitment process

On 25 April 2024, the French Commission Nationale de l’Informatique et des Libertés (CNIL) issued a notice after receiving complaints about excessive data collection in the context of a recruitment process. The unknown company in question asked applicants about their place of birth, their nationality, family situation, the names of their partners, their partners' place of birth and profession, and their children as well. The CNIL stated that compliance with the principle of data minimisation signifies that only "data that has a direct and necessary link with the job offered or with the assessment of professional skills" may be collected during the recruitment process. According to CNIL, the company in question has complied with the notice, meaning that CNIL has closed the procedure against it.