The General Data Protection Regulation (GDPR) is a European Union legal framework that governs companies' handling of personal data, particularly in the context of recruitment activities. GDPR aims to give individuals greater control over their personal data and imposes strict requirements on consent and data access. Non-compliance can result in significant fines. It applies to any organisation handling the data of EU citizens, regardless of the organisation's location within the EU. 