Recruitment: the CNIL orders a company to minimize the collection of personal data of candidates

Summary:

The French National Commission on Informatics and Liberties (CNIL) has received a complaint against a company that collected excessive personal data from job candidates, including birthplace, nationality, and family situation. This data collection is in violation of the principle of minimization, which requires the data controller to limit the information processed to only what is strictly necessary for the pursuit of its objectives.