Data Privacy and Your CV: What Job Seekers Should Know

Most countries now have some form of data-protection law — South Africa's POPIA, the EU/UK's GDPR, California's CCPA, and similar rules elsewhere. They all set rules for how companies handle your personal details, and your CV holds a lot of sensitive information: government ID numbers, home address, email, phone number, and work history.

The moment you post your CV on a public job board or email it to a dozen recruiters, you lose track of who has it. Bad actors can scrape it for spam, phishing, or identity theft. Companies are meant to protect your data and delete it once it's no longer needed, but that doesn't always happen.

To protect yourself, wherever you're job hunting, follow these key steps:

1. Share less to start with

Leave ID numbers, your exact street address, and reference contact details off the first version of your CV. During early screening, a recruiter only needs your general location and a way to reach you.

2. Share a secure link, not a static file

A PDF attachment gives the recipient a permanent copy of your details. Share an online link instead, and you can revoke access or update your details at any time.

3. Use cvitae's Contact-Reveal flow

cvitae lets you host your CV publicly while keeping your email, phone, and references hidden. Recruiters can read your experience and tap a button to request your contact details. You get an email and can approve or decline, keeping full control over your data no matter which privacy law applies to you.