Job Application Data Disposal

Summary:

GDPR data retention requirement for job application information of both rejected and successful candidates

Content (required):

We have a business requirement for GDPR wherein we have to delete job applications of all candidates that are 12 months old from rejection date. For successful candidates, the job application information has to be deleted 12 months after hire date.

In case of rejected candidates, we realize that even through HDL we can only inactivate the job application and not delete. Though data wouldn't be appear in user interface, it would be possible for one to query the database and see data. Is there any other mechanism to delete job application information