5

A friend of mine was looking for a job last August. She sent CVs for various positions.

Now, months later, somebody told her that if he Googles her name, her CV pops up. She tried it herself and sure enough, the first result is her CV in PDF format, from the website of one of the companies she contacted. The link is in a wp-content/2018/08 format, which means it was uploaded on their website, but it’s freely available for anyone to search and download it.

My question is: does she have any ground for legal action? Is such action worth the effort in terms of compensation?

The location is Cyprus, covered by EU and GDPR laws.

8

She could refer this to the Cyrpriot Commissioner for Personal Data Protection, but I would try contacting the company first and telling them to remove her Personal Data from the public website - or delete it completely. If they don't give a satisfactory response, mention the CPDP. This could lead to the data being removed within a few days, while an official complaint is likely to take longer.

She may have grounds for legal action which would result in the company being compelled to take down the data (or to close the website), but if your friend is thinking in terms of compensation, what compensation would she seek? If she can demonstrate and quantify financial losses that occurred specifically because of this disclosure there might be a possibility, but I suspect that would be difficult to prove.

  • 2
    Took your advice, and they promptly took it down. Feels kinda bitter being unable to make them pay (figuratively and literally) for being careless, but you are right that it would be near impossible to prove damages. Thanks. – GregKos Jan 25 at 9:52
  • @GregKos - Thanks for letting us know - always good to hear that SE has been useful. – ItWasLikeThatWhenIGotHere Jan 25 at 10:23
  • You can check after 3 days whether the CPDP has been informed by the company, Art. 33 GDPR requires them to do so. – wimh Jan 26 at 17:55

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.