{
  "@type": "FAQPage",
  "mainEntity": [{
    "@type": "Question",
    "name": "1. Do recruiters need candidate consent to store CVs?",
    "acceptedAnswer": {
      "@type": "Answer",
      "text": "Yes. Under GDPR, explicit consent is required to process and retain candidate CVs, unless another lawful basis (like legitimate interest) can be justified."
    }
  },{
    "@type": "Question",
    "name": "2. How long can recruiters keep candidate data in an ATS?",
    "acceptedAnswer": {
      "@type": "Answer",
      "text": "Typically, 6–12 months, depending on local laws. An ATS automates deletion after this period to stay compliant."
    }
  },{
    "@type": "Question",
    "name": "3. Can candidates ask to have their data deleted from an ATS?",
    "acceptedAnswer": {
      "@type": "Answer",
      "text": "Absolutely. GDPR grants the right to be forgotten, and most ATS platforms offer self-service deletion requests."
    }
  },{
    "@type": "Question",
    "name": "4. What happens if an ATS suffers a data breach?",
    "acceptedAnswer": {
      "@type": "Answer",
      "text": "Recruiters must notify regulators within 72 hours and inform affected candidates if there is a high risk to their rights."
    }
  },{
    "@type": "Question",
    "name": "5. Which ATS is best for GDPR compliance?",
    "acceptedAnswer": {
      "@type": "Answer",
      "text": "While several platforms offer compliance features, iSmartRecruit is particularly strong in balancing compliance automation with recruiter usability."
    }
  }]
}