The personal data provided by the employee must be deleted if not recruited
The recruiting organization must delete or delete the personal data of the employee provided if that person is not recruited.
According to Article 25 of the Law on Personal Data Protection, the responsibility for protecting personal data of agencies, organizations and individuals in labor recruitment is stipulated as follows:
a) Only required to provide information for recruitment purposes of recruiting agencies, organizations and individuals in accordance with the provisions of law; the information provided shall only be used for recruitment purposes and other purposes according to the agreement in accordance with the provisions of law;
b) The information provided must be processed in accordance with the provisions of law and must have the consent of the candidate;
c) The information provided by the candidate must be deleted or destroyed in case of non-recruitment, except in cases where there is another agreement with the candidate.
Thus, in case the employee has provided personal data when participating in the recruitment but is not recruited, the recruiting agency or organization must delete or cancel that data, unless there is another agreement with the recruited person.
See the original here