By default, candidate information is held in Access Recruit for one year from when they first activate their portal account. Towards the end of the year, the candidate will receive an email asking whether they wish to reactivate their account, which determines whether their information is kept for a further year, or whether the information is deleted.
Candidates can delete their own account under the Account tab, this removes their access to the system and withdraws any active applications. This is outlined to the candidate under this option, but it is important to note that this doesn't delete the candidate’s information from the CMS.
With the introduction of GDPR, you can change the data retention period from one year to six months. To request this, please raise a new case online. Candidates also have the right to request all of their information from the system, or for all of their personal details to be deleted from the system, both of which can also be requested through the support channel.