Scope
Define which CVs and resumes are covered (applicants, contractors, internal transfers) and which departments follow the policy.
A written policy reduces hiring risk, ensures consistent vetting, and protects sensitive applicant data. It clarifies responsibilities, improves compliance with privacy and recordkeeping rules, and supports defensible hiring decisions across departments.
HR, hiring managers, recruiters, and compliance officers typically use the CV policy when evaluating candidates or maintaining employee records.
The policy should also guide third-party vendors, background-screening firms, and any internal audit staff that access or process CV data.
The HR lead or designated recruiter is responsible for receiving CVs, confirming required fields are provided, and approving storage under the retention schedule. They coordinate background checks and obtain candidate consent when required.
The hiring manager documents role-specific qualifications, signs off on interview outcomes, and approves moving candidates to the offer stage. Their approval triggers personnel file updates and any required credential verification steps.
Define which CVs and resumes are covered (applicants, contractors, internal transfers) and which departments follow the policy.
List mandatory data elements such as legal name, contact details, employment history, education, licenses, and certificates.
Specify file formats, naming conventions, acceptable file size, and whether online forms or attachments are preferred.
Outline steps for credential checks, reference calls, background reports, and what documentation verifies credentials.
Describe access controls, role-based permissions, encryption needs, and limitations on sharing with third parties.
State retention periods, archival storage locations, secure disposal methods, and procedures for candidate requests to update or delete data.
| Field | Configuration |
|---|---|
| Name/Contact Fields | Required, validate email format, auto-normalize phone numbers. |
| File Upload | Accept PDF/DOCX, max 10 MB, virus-scan on upload. |
| Consent Checkbox | Required checkbox for background check & data processing consent. |
| Routing Logic | Auto-route to hiring manager and HR for verification. |
Use secure eSignature and storage solutions that meet legal and privacy obligations when accepting CVs electronically.
When using third-party platforms, verify BAAs and compliance certifications for regulated industries before transmitting CVs that contain sensitive health or financial information.
Acknowledge receipt within 2 business days.
Complete recruiter pre-screen within 5 business days.
Allow up to 10 business days for reference and background checks.
Hiring manager decision target within 15 business days.
Finalize and archive CV after offer acceptance or final rejection.
Their team standardized CV intake to reduce back-and-forth.
They enforced verification steps tied to credentialed hires.