> For the complete documentation index, see [llms.txt](https://docs.kisrec.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.kisrec.com/candidates/candidate-profile/gdpr.md).

# GDPR

You can navigate to a candidate profile from the [candidate search](/candidates/manage-candidates/candidate-search.md) or from a [context menu](/setup-your-account/introduction.md#context-menus) where the option is available.

{% hint style="info" %}
Please read the [GDPR](/compliance/gdpr.md) guide for further information.
{% endhint %}

Select the **GDPR** Tab.

<figure><img src="/files/kvmv9G7BfRL2yG2xK9pX" alt=""><figcaption><p>Candidate GDPR Tab - Action Required</p></figcaption></figure>

## Candidate GDPR Status

When a candidate is added to your database their GDPR status will **not** show as compliant until the candidate has opted in, either by completing the online [registration form](/candidates/candidate-profile/registration.md) or by being actively engaged with your agency, which must be within 30 days of the candidate being added.

If a candidate's last active engagement falls outside your data retention policy, their GDPR status will show as Action Required and you should reengage with the candidate to either regain opt-in permission or agree to delete the candidate's personal data from your database.

{% hint style="info" %}
Please see the [agency settings guide](broken://pages/rS4f4aj8jEwnzlnlBx3h#gdpr) for help configuring your data retention policy and oral consent script.
{% endhint %}

You can update a candidate GDPR opt-in status by using the [Called In Available](/candidates/called-in-available.md) feature or by creating a [Tracker.](broken://pages/qkYQc8h4D4aw9UDXlNF6) Both features give you the opportunity to read your GDPR oral consent script to the candidate to gain oral opt-in permission.

If a candidate opted in via the the online [registration](/candidates/candidate-profile/registration.md) form, the audit log entry provides a link to the [candidate terms](/setup-your-account/upload-candidate-terms-file.md) document that was in use at that time.&#x20;

The audit log also records the oral consent script that was in use at the time the candidate provided opt-in permission via the the [Called In Available](/candidates/called-in-available.md) and [Tracker ](broken://pages/qkYQc8h4D4aw9UDXlNF6)features.

<figure><img src="/files/EWDcOLbHkH9ILBcjQciP" alt=""><figcaption><p>Candidate GDPR Tab - Actively Engaged</p></figcaption></figure>
