Handling Resume Submissions Under India's Digital Personal Data Protection Act

1. INTRODUCTION

The Digital Personal Data Protection Act, 2023 (the "DPDP Act"), which introduces comprehensive obligations for handling personal data¹, grants the employers significant flexibility through the legitimate use exemption, allowing them to process employment-related personal data (names, addresses, contact information, financial record, biometric information etc.) without explicit consent when necessary for employment purposes including recruitment processes. This article explores the implications of the DPDP Act on resume handling and provides guidance for employers to ensure compliance while respecting the candidate's privacy and maintaining efficient recruitment practices.