Only collect what you need
Trim your forms. Every extra field is more risk and more to protect. Ask for what the job requires, no more.
Every extra form field is more risk and more to protect — trim it.
Tell people why
Have a simple privacy notice that says what you collect, why, and how to reach you about it. Publish it where people give you their details.
Keep it secure
Passwords and 2FA, limited access, backups, and locked filing. Most breaches are basic failures — get the basics right.