{"id":807,"date":"2026-10-30T08:29:36","date_gmt":"2026-10-30T07:29:36","guid":{"rendered":"https:\/\/www.twenty-one-nexus.com\/blog\/candidate-data-what-to-keep-why-it-matters-and-when-to-let-it-go\/"},"modified":"2026-11-03T18:02:59","modified_gmt":"2026-11-03T17:02:59","slug":"candidate-data-what-to-keep-and-for-how-long","status":"publish","type":"post","link":"https:\/\/www.twenty-one-nexus.com\/blog\/candidate-data-what-to-keep-and-for-how-long\/","title":{"rendered":"Candidate data, what to keep and for how long"},"content":{"rendered":"<p class=\"wp-block-paragraph\"><strong>Candidate Data: What to Keep, Why It Matters, and When to Let It Go<\/strong><\/p>\n\n<p class=\"wp-block-paragraph\">You reopen a maintenance leadership search and find three resumes, an old screening score, and a note saying \u201cstrong prospect.\u201d The candidate data is still there, but you cannot tell which details remain accurate or why the record was kept.<\/p>\n\n<p class=\"wp-block-paragraph\">Then the specialist asks you to remove their information. Your team must trace copies across the recruiting system, shared folders, and client submissions while deciding what needs review before deletion.<\/p>\n\n<p class=\"wp-block-paragraph\"><strong>At a glance<\/strong><\/p>\n\n<ul class=\"wp-block-list\"><li>Keep information tied to a clear recruiting purpose.<\/li><li>Separate application history from future-contact preferences.<\/li><li>Connect retention periods to events your team can verify.<\/li><li>Preserve useful decision evidence without collecting personal detail you do not need.<\/li><li>Check that deletion reaches copies, attachments, and connected systems.<\/li><\/ul>\n\n<h2 class=\"wp-block-heading\">Give every record a clear purpose<\/h2>\n\n<p class=\"wp-block-paragraph\">A resume, interview assessment, and scheduling email serve different purposes. Treating them as one permanent profile makes it difficult to decide what deserves protection, review, or removal.<\/p>\n\n<p class=\"wp-block-paragraph\">Start by naming the task each category supports. Contact details help you arrange conversations; structured interview notes explain an assessment; a client submission records what you shared and with whom.<\/p>\n\n<p class=\"wp-block-paragraph\">For the maintenance search, equipment experience may support screening, while shift availability helps establish whether the role is workable. Neither purpose justifies keeping unrelated personal information that happened to appear in an email.<\/p>\n\n<p class=\"wp-block-paragraph\">Assign an owner to each category as well. Your recruiting operations lead might manage application records, while a designated administrator handles access requests and deletion workflows.<\/p>\n\n<p class=\"wp-block-paragraph\">The distinction between useful evidence and database clutter is central to <a href=\"https:\/\/www.twenty-one-nexus.com\/blog\/what-belongs-in-your-ats-and-what-does-not\/\">deciding what belongs in your ATS<\/a>. Make that distinction before importing another spreadsheet.<\/p>\n\n<p class=\"wp-block-paragraph\"><strong>Purpose comes before duration.<\/strong> If nobody can explain what a record supports, assigning it a long storage period does not make it useful.<\/p>\n\n<p class=\"wp-block-paragraph\">This inventory also gives talent acquisition teams a shared vocabulary. Recruiters, account managers, and administrators can discuss the same categories instead of using \u201ccandidate file\u201d to mean several different things.<\/p>\n\n<h2 class=\"wp-block-heading\">Keep evidence, not personal clutter<\/h2>\n\n<p class=\"wp-block-paragraph\"><strong>Data minimization<\/strong> means collecting enough information to do the work without turning your database into a personal archive. It starts with application forms and continues through interviews, attachments, and internal messages.<\/p>\n\n<p class=\"wp-block-paragraph\">Ask whether each field changes a recruiting action. If a full home address is unnecessary for screening, a broad location may answer the practical question about travel or commuting.<\/p>\n\n<p class=\"wp-block-paragraph\">Use the same test for interview notes. \u201cDescribed coordinating overnight maintenance coverage\u201d documents relevant experience; a comment about the specialist\u2019s family arrangements does not explain their ability to perform the role.<\/p>\n\n<figure class=\"wp-block-table\"><table>\n<thead>\n<tr>\n<th>Information<\/th>\n<th>Useful recruiting purpose<\/th>\n<th>Handling approach<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Current resume<\/td>\n<td>Assess relevant experience<\/td>\n<td>Identify the current version<\/td>\n<\/tr>\n<tr>\n<td>Interview evidence<\/td>\n<td>Support assessment against criteria<\/td>\n<td>Use structured, factual notes<\/td>\n<\/tr>\n<tr>\n<td>Scheduling messages<\/td>\n<td>Arrange meetings<\/td>\n<td>Review after coordination ends<\/td>\n<\/tr>\n<tr>\n<td>Unrelated personal details<\/td>\n<td>No defined recruiting purpose<\/td>\n<td>Avoid collecting or copying<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/figure>\n\n<p class=\"wp-block-paragraph\">Do not paste an entire conversation into a profile when a short factual note will do. Long message histories can expose information to colleagues who only need an availability update.<\/p>\n\n<p class=\"wp-block-paragraph\">Make these choices visible in templates rather than relying on individual restraint. <strong>A smaller, better-defined record is easier to understand and maintain.<\/strong><\/p>\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1448\" height=\"1086\" src=\"https:\/\/www.twenty-one-nexus.com\/blog\/wp-content\/uploads\/2026\/10\/Candidate-Data-What-to-Keep-Why-It-Matters-and-When-to-Let-It-Go-1.jpg\" alt=\"learn what candidate data to retain, why it matters for compliance and hiring, and when to securely delete it to protect privacy and reduce risk.\" class=\"wp-image-806\" srcset=\"https:\/\/www.twenty-one-nexus.com\/blog\/wp-content\/uploads\/2026\/10\/Candidate-Data-What-to-Keep-Why-It-Matters-and-When-to-Let-It-Go-1.jpg 1448w, https:\/\/www.twenty-one-nexus.com\/blog\/wp-content\/uploads\/2026\/10\/Candidate-Data-What-to-Keep-Why-It-Matters-and-When-to-Let-It-Go-1-300x225.jpg 300w, https:\/\/www.twenty-one-nexus.com\/blog\/wp-content\/uploads\/2026\/10\/Candidate-Data-What-to-Keep-Why-It-Matters-and-When-to-Let-It-Go-1-1024x768.jpg 1024w, https:\/\/www.twenty-one-nexus.com\/blog\/wp-content\/uploads\/2026\/10\/Candidate-Data-What-to-Keep-Why-It-Matters-and-When-to-Let-It-Go-1-768x576.jpg 768w\" sizes=\"auto, (max-width: 1448px) 100vw, 1448px\" \/><\/figure>\n\n<h2 class=\"wp-block-heading\">Start retention clocks from clear events<\/h2>\n\n<p class=\"wp-block-paragraph\">Data retention becomes inconsistent when teams use vague instructions such as \u201ckeep for a reasonable time.\u201d A workable schedule identifies the record category, the starting event, the review owner, and the next action.<\/p>\n\n<p class=\"wp-block-paragraph\">Possible events include closing a requisition, recording a withdrawal, or completing a placement. Choose triggers your system can capture reliably rather than dates someone must remember to enter later.<\/p>\n\n<p class=\"wp-block-paragraph\">Do not assume that editing a profile should restart every clock. Correcting a phone number does not necessarily create a new reason to preserve an old application indefinitely.<\/p>\n\n<p class=\"wp-block-paragraph\">There is no single retention period you should apply across every operation. Rules vary by jurisdiction; have qualified counsel review the schedule before you configure it.<\/p>\n\n<p class=\"wp-block-paragraph\">Use a <a href=\"https:\/\/recruiting-agencies.com\/blog\/recruiting-agency-candidate-data-retention\">recruiting agency retention framework<\/a> to organize questions, not as a substitute for advice about your circumstances. Your operating model, client arrangements, and record categories all affect the review.<\/p>\n\n<p class=\"wp-block-paragraph\">For the maintenance search, closing the vacancy could trigger an application review while a separately managed future-contact record follows its own schedule. Document that distinction in your retention policies.<\/p>\n\n<p class=\"wp-block-paragraph\"><strong>A retention rule needs a visible starting event.<\/strong> Without one, even a carefully written schedule becomes difficult to execute consistently.<\/p>\n\n<h2 class=\"wp-block-heading\">Separate future contact from past applications<\/h2>\n\n<p class=\"wp-block-paragraph\">A closed application and an active talent-pool relationship answer different questions. One records what happened in a search; the other supports a possible conversation about future work.<\/p>\n\n<p class=\"wp-block-paragraph\">Keep those purposes separate in your workflow. A maintenance specialist who was unavailable for one opening may welcome another conversation, but the old application alone does not tell you their current preference.<\/p>\n\n<p class=\"wp-block-paragraph\"><strong>Consent management<\/strong> should make stated preferences understandable and traceable. Where your approach relies on consent, record what the person agreed to, when they did so, and how they can change that choice.<\/p>\n\n<p class=\"wp-block-paragraph\">Do not treat silence, an old reply, or a recruiter\u2019s enthusiasm as a clear expression of future interest. Establish the appropriate approach for each market with qualified advice.<\/p>\n\n<p class=\"wp-block-paragraph\">Your talent pool also needs useful freshness signals. Track when availability, location preferences, and specialist skills were last confirmed, rather than presenting every historical detail as current.<\/p>\n\n<p class=\"wp-block-paragraph\">A practical approach to <a href=\"https:\/\/www.twenty-one-nexus.com\/blog\/how-to-structure-a-talent-pool-recruiters-actually-use\/\">structuring a usable talent pool<\/a> starts with clear membership criteria and maintenance ownership. A large collection without those controls becomes another search problem.<\/p>\n\n<p class=\"wp-block-paragraph\"><strong>Past participation is history; future contact is a separate relationship.<\/strong> Treating them separately improves the candidate experience and gives recruiters a clearer basis for outreach.<\/p>\n\n<h2 class=\"wp-block-heading\">Control access beyond the main system<\/h2>\n\n<p class=\"wp-block-paragraph\">Your ATS may have careful permissions while the same information travels freely through spreadsheets and email attachments. Privacy compliance work therefore needs a map of where recruiting information actually goes.<\/p>\n\n<p class=\"wp-block-paragraph\">Follow one maintenance specialist\u2019s record through sourcing, screening, client submission, interview scheduling, and reporting. Note every export, shared folder, integration, and recipient involved.<\/p>\n\n<p class=\"wp-block-paragraph\">Then match access to the task. A coordinator may need contact details and interview times without needing compensation discussions or detailed assessment notes.<\/p>\n\n<p class=\"wp-block-paragraph\">Give temporary access an owner and a review point. When a search ends or an employee changes responsibilities, check whether their permissions still match the work they perform.<\/p>\n\n<p class=\"wp-block-paragraph\">A <a href=\"https:\/\/technicaltalentgroup.com\/candidate-data-privacy-hiring-checklist\/\">candidate privacy checklist<\/a> can help structure that review. Use it to ask concrete questions about storage, sharing, and access rather than treating a completed checklist as proof that every risk is resolved.<\/p>\n\n<p class=\"wp-block-paragraph\">Client submissions deserve particular attention because they create another copy outside your immediate workflow. Record what you sent, its purpose, and the contact responsible for handling it.<\/p>\n\n<p class=\"wp-block-paragraph\"><strong>Protection follows the information, not the application boundary.<\/strong> Review the places where people actually work, including the shortcuts they use when a difficult search becomes urgent.<\/p>\n\n<h2 class=\"wp-block-heading\">Preserve the reasons behind screening decisions<\/h2>\n\n<p class=\"wp-block-paragraph\">A score without context rarely explains why someone progressed. Useful recruitment records connect the role requirement, the evidence reviewed, and the recruiter\u2019s judgment.<\/p>\n\n<p class=\"wp-block-paragraph\">For the maintenance role, record whether the assessment concerned equipment troubleshooting, team leadership, or overnight coverage. Keep the supporting observation separate from the interpretation so another reviewer can understand the reasoning.<\/p>\n\n<p class=\"wp-block-paragraph\">If software provides a recommendation, preserve enough context to identify what the recruiter reviewed. That may include the criteria used, the output presented, and any correction made after checking the source material.<\/p>\n\n<p class=\"wp-block-paragraph\"><strong>Recruiters make the hiring decision; the software assists them.<\/strong> A tool\u2019s ranking should not replace an explanation that a person can examine and challenge.<\/p>\n\n<p class=\"wp-block-paragraph\">Twenty One Nexus is an illustration of this approach: evaluate recruiting software by whether it helps you connect evidence to human review, rather than by how much information it can accumulate.<\/p>\n\n<p class=\"wp-block-paragraph\">Avoid copying every intermediate output into the permanent file. Decide which evidence is needed to explain the action, then apply the relevant schedule to supporting material.<\/p>\n\n<p class=\"wp-block-paragraph\"><strong>Keep the reason, not just the result.<\/strong> That makes later reviews more useful without turning the database into an unlimited archive of every automated suggestion.<\/p>\n\n<h2 class=\"wp-block-heading\">Test deletion across the whole workflow<\/h2>\n\n<p class=\"wp-block-paragraph\">Pressing delete on a profile does not tell you what happened to its attachments, exports, or connected copies. Secure deletion needs a defined process and a way to check its coverage.<\/p>\n\n<p class=\"wp-block-paragraph\">Use a controlled test record to trace the workflow. Check the main profile, search results, attachments, integrations, shared drives, and any restore process that could return removed information.<\/p>\n\n<p class=\"wp-block-paragraph\">Distinguish deletion from anonymization. Removing a name may leave someone identifiable through a rare job title, location, employer history, or combination of details.<\/p>\n\n<p class=\"wp-block-paragraph\">Ask your technical owner how backups are handled, when copies expire, and how restoration avoids silently reintroducing records marked for removal. Document the actual behavior rather than assuming all storage works alike.<\/p>\n\n<p class=\"wp-block-paragraph\">Build an exception route for records that need qualified review before removal. Assign an owner, record the reason for pausing the action, and set a review point so the exception does not disappear into a queue.<\/p>\n\n<p class=\"wp-block-paragraph\">Keep a restrained activity log that records the category, action, time, and outcome without recreating the deleted profile. A failed job should produce a visible task for someone to resolve.<\/p>\n\n<p class=\"wp-block-paragraph\"><strong>Deletion is complete only when the defined process has been checked.<\/strong> A green status on one screen is not enough evidence.<\/p>\n\n<h2 class=\"wp-block-heading\">Put the rules into daily work<\/h2>\n\n<p class=\"wp-block-paragraph\">Start with one closed search rather than rewriting every workflow at once. Use the maintenance leadership vacancy to test whether your team can explain what it holds, where it lives, and what happens next.<\/p>\n\n<p class=\"wp-block-paragraph\">Assign separate responsibilities for maintaining the schedule, reviewing exceptions, and checking technical execution. One person may perform several tasks, but none should remain implied.<\/p>\n\n<p class=\"wp-block-paragraph\">Next, configure the workflow around those decisions. Required categories, review queues, restricted exports, and visible failure alerts make the policy usable when recruiters are busy.<\/p>\n\n<p class=\"wp-block-paragraph\">Twenty One Nexus offers an illustration of the approach to assess: software should help your team apply defined rules while leaving judgment and accountability with people. Evaluate that support through a real workflow, not a feature list.<\/p>\n\n<p class=\"wp-block-paragraph\">During routine operations reviews, examine overdue actions and unexplained exceptions. Ask whether delays come from unclear ownership, missing information, or a technical failure before changing the policy itself.<\/p>\n\n<p class=\"wp-block-paragraph\">Test what recruiters can explain to candidates, too. A clear account of what you keep and why is more useful than language nobody on the team can translate.<\/p>\n\n<p class=\"wp-block-paragraph\"><strong>The practical test is traceability:<\/strong> you can explain why information remains, who owns the next action, and how removal will be verified.<\/p>\n\n<script type=\"application\/ld+json\">\n{\"@context\":\"https:\/\/schema.org\",\"@type\":\"FAQPage\",\"mainEntity\":[{\"@type\":\"Question\",\"name\":\"How long should you keep candidate records?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"There is no universal period. Rules vary by jurisdiction. Establish a reviewed schedule for each record category, with a clear starting event and an accountable owner.\"}},{\"@type\":\"Question\",\"name\":\"Can you keep someone for future roles?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Manage future contact separately from the closed application. Record the purpose, the appropriate basis for your approach, stated preferences, and a review point.\"}},{\"@type\":\"Question\",\"name\":\"Does removing a name anonymize a record?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Not necessarily. Employment history, location, and unusual skills can still identify someone. Assess whether the remaining information can be linked back to the person.\"}},{\"@type\":\"Question\",\"name\":\"What should a deletion log contain?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Keep enough detail to verify the action, such as the record category, time, outcome, and exception status. Avoid copying the removed personal information into the log.\"}}]}\n<\/script>\n<h3>How long should you keep candidate records?<\/h3>\n<p>There is no universal period. Rules vary by jurisdiction. Establish a reviewed schedule for each record category, with a clear starting event and an accountable owner.<\/p>\n<h3>Can you keep someone for future roles?<\/h3>\n<p>Manage future contact separately from the closed application. Record the purpose, the appropriate basis for your approach, stated preferences, and a review point.<\/p>\n<h3>Does removing a name anonymize a record?<\/h3>\n<p>Not necessarily. Employment history, location, and unusual skills can still identify someone. Assess whether the remaining information can be linked back to the person.<\/p>\n<h3>What should a deletion log contain?<\/h3>\n<p>Keep enough detail to verify the action, such as the record category, time, outcome, and exception status. Avoid copying the removed personal information into the log.<\/p>\n\n","protected":false},"excerpt":{"rendered":"<p>Why It Matters, and When to Let It Go&hellip;<\/p>\n","protected":false},"author":2,"featured_media":805,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[6],"tags":[],"class_list":["post-807","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-compliance"],"_links":{"self":[{"href":"https:\/\/www.twenty-one-nexus.com\/blog\/wp-json\/wp\/v2\/posts\/807","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.twenty-one-nexus.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.twenty-one-nexus.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.twenty-one-nexus.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.twenty-one-nexus.com\/blog\/wp-json\/wp\/v2\/comments?post=807"}],"version-history":[{"count":1,"href":"https:\/\/www.twenty-one-nexus.com\/blog\/wp-json\/wp\/v2\/posts\/807\/revisions"}],"predecessor-version":[{"id":808,"href":"https:\/\/www.twenty-one-nexus.com\/blog\/wp-json\/wp\/v2\/posts\/807\/revisions\/808"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.twenty-one-nexus.com\/blog\/wp-json\/wp\/v2\/media\/805"}],"wp:attachment":[{"href":"https:\/\/www.twenty-one-nexus.com\/blog\/wp-json\/wp\/v2\/media?parent=807"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.twenty-one-nexus.com\/blog\/wp-json\/wp\/v2\/categories?post=807"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.twenty-one-nexus.com\/blog\/wp-json\/wp\/v2\/tags?post=807"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}