When must the notice be provided?

Provide the notice at the first collection of applicant personal data — for example, when the applicant submits an application or resume. Record the delivery and any consent or objections to maintain an audit trail.

Can this notice be delivered electronically?

Yes. Electronic delivery is allowed if the method meets ESIGN standards (intent, consent, attribution, and record retention) and any applicable state e‑signature law such as UETA or New York ESRA is observed.

What if an applicant declines to consent?

If processing relies on consent and an applicant declines, you must avoid consent‑dependent activities or document an alternative legal basis (e.g., legitimate interest) and explain consequences in writing.

How long must applicant records be kept?

Retain applicant records according to your retention policy and legal minima: generally at least 3 years for tax/financial records and 6 years for HIPAA‑related records under 45 CFR §164.530(j).

Do I need extra language for background checks?

Yes. Disclose use of consumer reports and follow FCRA requirements and any state screening laws; obtain required authorizations before ordering reports.

Who should sign or approve the notice?

A designated privacy officer, HR leader, or authorized company representative should approve the notice. Keep documented approval and version history for legal defensibility.

Electronic Signature
Templates
Legal
Job Applicant Privacy Notice Form

Job Applicant Privacy Notice Form

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

JOB APPLICANT PRIVACY NOTICE FORM

This Job Applicant Privacy Notice (the Notice) is issued by Employer Name: with principal address: and concerns the personal data provided by Applicant Name: on this Notice issued on .

RECITALS

WHEREAS, Employer processes personal data of individuals who apply for employment for the purpose of evaluating suitability for employment and complying with legal obligations; and

WHEREAS, Applicant has provided or may provide personal information, background information and other application materials to Employer in connection with an application for employment; and

WHEREAS, Employer issues this Notice to inform Applicant of the categories of data collected, the purposes of processing, retention periods, disclosures, Applicant rights and the contact details for privacy inquiries.

NOW THEREFORE, in consideration of the foregoing recitals and the mutual acknowledgments below, the parties agree as follows.

1. DEFINITIONS

"Personal Data" means any information relating to an identified or identifiable natural person provided by Applicant in connection with an application for employment. "Processing" means any operation performed on Personal Data, whether or not by automated means.

2. CATEGORIES OF DATA COLLECTED

Employer may collect the following categories of Personal Data relating to Applicant: identification and contact details, employment and education history, professional qualifications and licenses, references, compensation history, immigration and right-to-work documentation, background check results and other information reasonably necessary to consider Applicant for a position.

Applicant acknowledges the Employer may request or collect more sensitive categories of data only where permitted by law and only with explicit consent, including: criminal conviction data, health or disability information for accommodation purposes, and other special categories as applicable.

3. PURPOSES AND LAWFUL BASES FOR PROCESSING

Employer will process Personal Data for the purposes of assessing Applicant’s qualifications, performing background and reference checks, conducting interviews, establishing and administering potential employment relationships, complying with legal and regulatory obligations, and protecting the safety and security of the workplace.

The lawful bases for such processing include: performance of pre-contractual measures at Applicant’s request, Employer’s legitimate interests in evaluating candidates, compliance with legal obligations, and where required, Applicant's explicit consent for sensitive data processing.

4. CONSENT AND SPECIFIC AUTHORIZATIONS

By signing this Notice, Applicant acknowledges receipt of this information and, where applicable, provides consent to the processing of sensitive Personal Data specifically identified below for recruitment purposes and lawful background screening.

Consent to conduct background checks: Consent to process health or disability information for accommodation: Consent to automated suitability assessments:

5. RECIPIENTS AND THIRD-PARTY DISCLOSURES

Employer may disclose Personal Data to third-party service providers engaged to perform recruiting, background screening, reference checking, identity verification, human resources administration, legal compliance, payroll and benefits administration. Disclosures will be limited to the minimum data necessary to accomplish the specified purpose and will be subject to contractual safeguards.

If Applicant wishes to list additional permitted recipients or restrictions, describe below:

6. TRANSFER OF DATA OUTSIDE APPLICABLE JURISDICTION

Personal Data may be transferred to jurisdictions with different data protection laws where Employer or its processors operate. Employer will apply appropriate safeguards required by applicable law to maintain adequate protection for such transfers, including contractual protections and security measures.

7. DATA RETENTION

Applicant's Personal Data will be retained only as long as necessary for the purposes set out in this Notice, including any retention period required by law or that is reasonably necessary to defend legal claims. Typical retention period (if no hire): .

8. DATA SECURITY

Employer maintains administrative, technical and physical safeguards designed to protect Personal Data against unauthorized access, disclosure, alteration and destruction. While Employer takes reasonable measures to secure data, no transmission or storage mechanism is completely secure.

9. APPLICANT RIGHTS

Where applicable, Applicant has rights to access, rectify, erase, restrict or object to processing, and to request data portability. Applicant may withdraw any consent given, subject to lawful restrictions and to the extent withdrawal does not render processing unlawful for other bases.

Data Protection Contact (name and telephone or email):

10. AUTOMATED DECISION MAKING

Employer may use automated tools to assist in candidate screening or ranking. Applicant will be informed when automated decision-making has a legal or significant effect and provided with meaningful information about the logic involved and the safeguards in place.

11. NOTICES

Notices related to this Notice shall be sent to the addresses provided below. A notice is effective when received in writing by the recipient at the address provided.

Employer Notice Address: Applicant Notice Address:

12. AMENDMENTS; WAIVER

Employer may amend this Notice to reflect changes in processing activities or legal requirements. Any amendment shall be effective upon written notice to Applicant. No waiver of any provision of this Notice shall be effective unless in writing and signed by both parties.

13. GOVERNING LAW

This Notice shall be governed by and construed in accordance with the substantive laws of the jurisdiction where Employer's principal place of business is located, without regard to conflict of laws principles.

14. ENTIRE AGREEMENT; SEVERABILITY; COUNTERPARTS

This Notice constitutes the entire understanding between the parties with respect to its subject matter. If any provision is held invalid or unenforceable, the remainder will continue in full force. This Notice may be executed in counterparts, each of which shall be deemed an original.

ACKNOWLEDGMENT

Applicant acknowledges receipt of this Job Applicant Privacy Notice, understands the categories of Personal Data to be processed and the purposes for such processing, and agrees that Employer may process Applicant’s Personal Data consistent with this Notice.

Applicant acknowledges:

Employer Printed Name:

By (Signature):

Date:

Applicant Printed Name:

By (Signature):

Date:

What the Job Applicant Privacy Notice Form Is

A Job Applicant Privacy Notice Form explains to job applicants how an employer collects, uses, stores, and discloses personal information during recruitment. It typically describes categories of data (contact, resume, background checks), lawful bases for processing, retention periods, and applicants' rights under relevant laws. The form can be issued on paper or electronically; when provided electronically it must meet ESIGN and applicable state e‑signature rules to be treated as a valid disclosure.

Why a Clear Privacy Notice Matters for Hiring

A concise privacy notice reduces legal risk and builds transparency by telling applicants what data you collect and why. It helps employers meet statutory obligations (for example, CCPA/CPRA disclosures in California) and supports defensible recordkeeping of consent or legitimate interest decisions.

Who Issues and Receives This Form

Employers, HR teams, and recruiting vendors typically issue the Job Applicant Privacy Notice Form early in the hiring process to all applicants.

In-house HR teams managing direct hires and interviews for permanent roles.
Recruiting agencies and staffing firms sharing candidate details with employers.
Third-party background or screening vendors receiving applicant personal data.

Provide the notice at first collection of personal data and keep a record of delivery and any applicant consent or objections.

Core Sections to Include in a Professional Notice

A well-structured Job Applicant Privacy Notice Form organizes key topics so applicants can quickly understand how their data will be handled.

Data Collected

List categories such as contact details, education, employment history, references, background checks and any biometric data if collected.

Purpose

Explain recruiting purposes: candidate evaluation, background checks, regulatory compliance, diversity reporting, and onboarding prework.

Legal Basis

State the legal basis for processing (consent, legitimate interest, contractual necessity) and when consent will be requested.

Third Parties

Identify categories of recipients such as background-screening vendors, IT providers, payroll, and legal advisers.

Applicant Rights

Describe rights to access, correct, delete, restrict processing, portability, and how to submit requests, including CCPA/CPRA rights where applicable.

Retention

State retention periods for active applicant files and archival periods, and how retention decisions are made.

Step-by-Step: Distribute and Capture Applicant Acknowledgment

Follow a simple sequence to issue the notice, obtain consent where needed, and retain documentation.

01

Prepare Notice: Customize notice for role and jurisdiction.
02

Provide to Applicant: Deliver at first data collection point.
03

Capture Consent: Record signature, checkbox, or other acknowledgment.
04

Store Record: Retain copy with metadata and access logs.

Digital Workflow Settings to Configure

Configure the e‑delivery workflow to log consent and preserve an audit trail for each applicant interaction.

Field	Configuration
Consent Checkbox	Required; capture timestamp and IP address
Signature Field	Optional; enable ESIGN-compliant audit trail
Authentication	Email + optional SMS code for higher assurance
Retention Tagging	Assign retention metadata on completion

Delivery Options and Technical Considerations

Choose delivery methods that preserve evidence: email with audit trail, secure applicant portal, or RON when notarization is required.

Email Delivery: Works for most applicants; ensure audit trail records delivery and opening events.
Applicant Portal: Centralizes documents and access control; useful for high-volume recruiting.
Remote Notarization: Use RON only where notarization or witnessed acknowledgment is required by law.

Confirm your chosen platform supports ESIGN/UETA compliance, audit logs, and secure export formats for long-term retention.

How Electronic Delivery and Acknowledgment Works

A standard electronic workflow creates verifiable evidence of notice delivery and applicant consent.

Upload Notice: Sender uploads the form and configures fields.
Send Link: Applicant receives a secure email link.
Authenticate: Applicant verifies identity (email or SMS).
Sign & Record: System logs signature, IP, timestamp, and audit trail.

Timing: When to Provide and Record the Notice

Provide the privacy notice at first collection of personal data and record delivery and any consent decision promptly to create an auditable trail.

At Application:

Deliver notice when applicant submits application materials.

Before Background Checks:

Provide any required disclosures prior to screenings.

After Consent:

Store signed acknowledgment immediately with metadata.

Retention Start:

Retention clock begins on application date or last contact.

Request Responses:

Acknowledge privacy requests within statutory timeframes.

Key Processing Milestones for Each Applicant

Track these sequential milestones from notice issuance to final disposition to ensure compliance and defensible records.

01

Notice Issued

Applicant receives the privacy notice and request for acknowledgment.

02

Consent Recorded

System captures signature, checkbox, or documented objection.

03

Screening Completed

Background checks or references are executed per notice terms.

04

File Closure

Document and metadata archived or purged per retention policy.

Common Mistakes to Avoid

Using vague language about data use that leaves applicants unsure which third parties receive data.
Failing to capture and store evidence of consent or delivery, making disputes difficult to resolve.
Applying a single global notice without localizing for state privacy laws like California's CCPA/CPRA.
Overlooking biometric or background-screening disclosures that trigger extra consent or notice requirements.

Legal Risks from Inadequate Notices

HIPAA Penalties: Civil fines under 45 CFR §§160–164

CCPA/CPRA Fines: Enforcement and statutory penalties in California

Consent Defects: ESIGN failures risk unenforceable acknowledgments

Data Breach Liability: Increased exposure if notice does not limit data sharing

I-9 Risks: Incorrect retention triggers DHS penalties

Employment Claims: Privacy lapses can support discrimination or wrongful-processing claims

eSignature Pricing Landscape for Applicant Notices

Compare common vendor entry prices and feature differences relevant to processing Job Applicant Privacy Notice Forms. signNow is listed first per comparison table convention.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Varies by vendor	Varies by vendor	Varies by vendor	Varies by vendor
Bulk Send	Yes	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No

Common Questions About the Job Applicant Privacy Notice Form

Answers to frequently asked questions address validity, electronic delivery, consent withdrawal, and storage practices for applicant notices.

Need help? Contact support

When must the notice be provided?
Provide the notice at the first collection of applicant personal data — for example, when the applicant submits an application or resume. Record the delivery and any consent or objections to maintain an audit trail.
Can this notice be delivered electronically?
Yes. Electronic delivery is allowed if the method meets ESIGN standards (intent, consent, attribution, and record retention) and any applicable state e‑signature law such as UETA or New York ESRA is observed.
What if an applicant declines to consent?
If processing relies on consent and an applicant declines, you must avoid consent‑dependent activities or document an alternative legal basis (e.g., legitimate interest) and explain consequences in writing.
How long must applicant records be kept?
Retain applicant records according to your retention policy and legal minima: generally at least 3 years for tax/financial records and 6 years for HIPAA‑related records under 45 CFR §164.530(j).
Do I need extra language for background checks?
Yes. Disclose use of consumer reports and follow FCRA requirements and any state screening laws; obtain required authorizations before ordering reports.
Who should sign or approve the notice?
A designated privacy officer, HR leader, or authorized company representative should approve the notice. Keep documented approval and version history for legal defensibility.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now