Privacy review draft

DPIA draft: CV Summarization using OpenAI

Processing purpose

Summarize candidate CVs for recruiter review and reduce manual reading time.

Data categories

Employment history, education, skills, contact details, and free-text CV content.

Risks

Inaccurate summaries, special-category inference, cross-border transfer uncertainty, and overreliance by recruiters.

Mitigations

Human review, prompt logging policy, vendor DPA, and candidate-facing transparency language.

Open questions

Vendor DPA and prompt logging policy need approval before external sharing.