In internal recruitment, do we provide employees with a privacy notice?

ANSWER

If an employee already has information on the processing of their personal data by the employer, because it was provided to them when they were hired, there is no need to provide all the information again (Article 13(4) GDPR). The controller is then obliged to provide the employee only with "new" information that is updated in connection with the specific processing activity. In the case of internal recruitment, this may be, for example, information on the purpose of processing, i.e. your data will be processed by the employer for the purpose of conducting internal recruitment.