What makes candidate sourcing GDPR-compliant?
GDPR-compliant sourcing means having a legal basis (usually legitimate interest) for processing candidate data, informing candidates when you contact them, honouring deletion and access requests, and keeping the data in appropriate jurisdictions. In practice: European data residency, documented processing, and a DPO who answers.
For European recruiting teams the practical questions are simple: where does the data live, who are the subprocessors, how are candidate rights handled, and what happens on a deletion request. A vendor should answer all four in writing without being chased.
Avery is built in Europe on European data with a reachable DPO: the GDPR section of the product page answers the standard DPO questionnaire directly.