Handling Resumes and Candidate Data Privately: A Privacy Checklist for HR and Recruiters

HR Handles More Personal Data Than Almost Any Other Function

A single resume can contain a candidate's full legal name, home address, personal phone number and email, employment history going back a decade, education records, and — depending on the country and industry — a photo, date of birth, or nationality. Multiply that by every open role a company is hiring for, and HR and recruiting teams end up processing more raw personal data, on more individuals who never directly agreed to a specific vendor's terms of service, than almost any other business function.

Under GDPR (in the EU/UK), LGPD (in Brazil), and similar frameworks elsewhere, a resume is personal data, full stop — and processing it, including passing it through a third-party file conversion tool "just to compress the PDF" or "just to convert the format for our system," is a data processing activity subject to those laws, regardless of how routine it feels.

Where the Risk Actually Shows Up

• Compressing a resume PDF to fit an applicant-tracking-system upload limit, using a random online compressor
• Converting a Word resume to PDF (or the reverse) using a free web converter before forwarding it to a hiring manager
• Resizing a candidate's headshot photo for an internal profile, in regions where headshots are still commonly submitted
• Stripping metadata from a scanned ID or reference document attached to an offer package

Each of these is a completely normal, everyday HR task — and each one, if done on a cloud-based tool, means a candidate's personal data was sent to a server neither the candidate nor, often, the company's own legal/compliance team ever explicitly approved as a data processor.

The Client-Side Checklist for HR Teams

1. Compress resume PDFs locally: Compress Image is free for photo-based scans; for full PDF resumes, most ATS platforms accept PDFs up to a few MB, so compression is rarely even necessary — check before routing a file anywhere.
2. Convert Word to PDF and back locally: Word to PDF and PDF to Word (both free to try 3x/day, unlimited with PRO) run entirely in-browser.
3. Resize candidate photos privately: Resize Image and Compress Image are both free, unlimited, client-side.
4. Check what metadata a scanned document carries: EXIF Viewer (DCPixel PRO) shows embedded metadata — including, for photos, GPS location data some phones embed automatically — before you forward a file externally.
5. Redact anything that shouldn't be shared further: Redact PDF (free to try 3x/day) permanently removes sensitive sections — useful when a reference letter or background check report contains information beyond what a hiring manager needs to see.

Why "We Only Used It Once" Doesn't Reduce the Exposure

A common assumption is that a one-off use of a free online tool for a single resume is low-risk because it's not a systematic vendor relationship. From a data-protection standpoint, that framing doesn't hold up — a single unauthorized disclosure of one candidate's personal data is still a disclosure, and if it happens routinely across dozens or hundreds of candidates a year because it's the team's default habit, it adds up to a real, recurring processing activity that a data protection audit would flag. The fix isn't more paperwork per file — it's defaulting to tools that never transmit the file anywhere, so the question of "who processed this candidate's data" has one simple answer: nobody but the recruiter's own device.

Conclusion

Candidates trust HR teams with detailed personal information as a basic condition of applying for a job. Keeping routine formatting, compression, and cleanup tasks entirely on your own device — rather than routing resumes and candidate documents through unfamiliar cloud tools — is a simple, no-cost way to honor that trust without slowing down a single hiring workflow.