# GDPR

You can navigate to a candidate profile from the [candidate search](https://docs.kisrec.com/candidates/manage-candidates/candidate-search) or from a [context menu](https://docs.kisrec.com/setup-your-account/introduction#context-menus) where the option is available.

{% hint style="info" %}
Please read the [GDPR](https://docs.kisrec.com/compliance/gdpr) guide for further information.
{% endhint %}

Select the **GDPR** Tab.

<figure><img src="https://1771634726-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F4iyyoX6EJroqwfH056WE%2Fuploads%2FMZGKfPZFitiiQMbpLCFP%2Fimage.png?alt=media&#x26;token=da540193-5550-41c7-a617-c5e963c3f41b" alt=""><figcaption><p>Candidate GDPR Tab - Action Required</p></figcaption></figure>

## Candidate GDPR Status

When a candidate is added to your database their GDPR status will **not** show as compliant until the candidate has opted in, either by completing the online [registration form](https://docs.kisrec.com/candidates/candidate-profile/registration) or by being actively engaged with your agency, which must be within 30 days of the candidate being added.

If a candidate's last active engagement falls outside your data retention policy, their GDPR status will show as Action Required and you should reengage with the candidate to either regain opt-in permission or agree to delete the candidate's personal data from your database.

{% hint style="info" %}
Please see the [agency settings guide](https://docs.kisrec.com/candidates/candidate-profile/broken-reference) for help configuring your data retention policy and oral consent script.
{% endhint %}

You can update a candidate GDPR opt-in status by using the [Called In Available](https://docs.kisrec.com/candidates/called-in-available) feature or by creating a [Tracker.](https://docs.kisrec.com/candidates/candidate-profile/broken-reference) Both features give you the opportunity to read your GDPR oral consent script to the candidate to gain oral opt-in permission.

If a candidate opted in via the the online [registration](https://docs.kisrec.com/candidates/candidate-profile/registration) form, the audit log entry provides a link to the [candidate terms](https://docs.kisrec.com/setup-your-account/upload-candidate-terms-file) document that was in use at that time.&#x20;

The audit log also records the oral consent script that was in use at the time the candidate provided opt-in permission via the the [Called In Available](https://docs.kisrec.com/candidates/called-in-available) and [Tracker ](https://docs.kisrec.com/candidates/candidate-profile/broken-reference)features.

<figure><img src="https://1771634726-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F4iyyoX6EJroqwfH056WE%2Fuploads%2FbCJWcDSifYiFBtwIXV00%2Fimage.png?alt=media&#x26;token=2745a047-1c49-4094-a7eb-a4cc93b4d559" alt=""><figcaption><p>Candidate GDPR Tab - Actively Engaged</p></figcaption></figure>
