FS-ISAC Applicant Privacy Notice
FS-ISAC is committed to protecting the privacy and security of personal information provided by job applicants. This Applicant Privacy Notice explains how we collect, use, disclose, transfer, store, and retain personal information during our recruitment and hiring processes. By applying for employment with FS-ISAC, you acknowledge that your personal information will be processed as described in this Notice.
Information We Collect
We may collect personal information directly from you, from third parties acting on your behalf, and from publicly available sources.
Information You Provide
We may collect the following categories of personal information directly from you:
- Contact information: full name, email address, telephone number, and mailing address.
- Professional and application information: resume/CV, employment and education history, certifications, professional memberships, skills, qualifications, work experience, cover letters, writing samples, references, salary expectations, availability, and work preferences.
- Eligibility information: work authorization status, visa sponsorship requirements, and eligibility to work in a specific country.
- Evaluate qualifications and suitability for employment;
- Communicate regarding employment opportunities;
- Schedule interviews and assessments;
- Verify information provided during the application process;
- Conduct reference checks;
- Conduct background checks where permitted by law
- Assess eligibility to work in applicable jurisdictions; and
- Establish, exercise, or defend legal claims.
- Take steps prior to entering an employment contract;
- Comply with legal obligations;
- Demonstrate legitimate business interests related to recruitment; and
- Consent, where required by applicable law.
Information Collected During Recruitment
During recruitment, we may collect information related to your application, including interview feedback, recruiter and hiring manager notes, assessment results, reference checks, and background screening results where permitted by law.
Information from Public Sources
We may collect information from public or professional sources, such as professional networking sites, publicly available professional profiles, professional publications and presentations, and public records where legally permissible.
Selective Personal Information
In limited circumstances and only where permitted by law, we may collect sensitive personal information, such as disability accommodation requests, veteran status, criminal history information when relevant and legally permitted, and background screening information. Sensitive personal information will be collected only when necessary and handled using appropriate safeguards.
How We Use Your Information
We use applicant information to:
- Evaluate qualifications and suitability for employment;
- Communicate regarding employment opportunities;
- Schedule interviews and assessments;
- Verify information provided during the application process;
- Conduct reference checks;
- Conduct background checks where permitted by law
- Assess eligibility to work in applicable jurisdictions; and
- Establish, exercise, or defend legal claims.
Legal Basis for Processing (EU/UK Applicants)
For applicants located in the European Economic Area or United Kingdom, we process personal information based on one or more of the following legal grounds:
- Take steps prior to entering an employment contract;
- Comply with legal obligations;
- Demonstrate legitimate business interests related to recruitment; and
- Consent, where required by applicable law.
How We Share Your Information
We do not sell applicant personal information. We may share personal information with the following categories of recipients:
Service Providers
We use third-party service providers that support recruitment and hiring activities, including applicant tracking systems and HR platforms, recruitment and sourcing platforms, background screening providers, assessment and testing providers, references, and IT, cloud hosting, and security providers. These providers are contractually obligated to protect personal information and may only use it for authorized purposes.
FS-ISAC Employees
Information may be shared internally with recruiters, hiring managers, interview panel members, Human Resources employees, and other personnel with a legitimate business need.
Legal and Regulatory Authorities
We may disclose information when required by applicable law, court order, government investigation, regulator inquiry, or to protect legal rights and interests.
International Data Transfers
FS-ISAC operates globally and may transfer applicant information between countries where we maintain operations or engage service providers, including the United States, United Kingdom, Netherlands, Canada, Latin America, Europe, Singapore, and other jurisdictions where FS-ISAC or its service providers operate. Where required by applicable law, we use appropriate safeguards for international transfers.
Data Retention
We retain applicant information only for as long as necessary to fulfill the purposes described in this Notice and comply with legal obligations. We may also retain applicant information to consider future employment opportunities, where permitted by applicable law. Retention periods may vary by jurisdiction. After the applicable retention period, information is securely deleted, anonymized, or archived in accordance with our records management practices.
Successful Applicants
Information collected during recruitment becomes part of the employment record and is retained according to applicable employment record retention requirements.
Unsuccessful Applicants
Applicant records for unsuccessful applicants are generally retained for up to three years from the conclusion of the recruitment process, or for a longer period where required by applicable law, regulatory requirements, or legitimate business purposes.
Your Privacy Rights
Depending on your location, you may have rights regarding your personal information, including access, correction, deletion, restriction of processing, objection to processing, data portability, withdrawal of consent where consent is the legal basis for processing, and other rights available under applicable law. These rights may be subject to legal limitations and exceptions.
Security
FS-ISAC maintains administrative, technical, and physical safeguards designed to protect applicant information against unauthorized access, use, disclosure, alteration, and destruction.
Selective Personal and Equal Employment Opportunity Information
As part of the application and hiring process, we may collect certain categories of personal information that are subject to additional protections or legal requirements ("Selective Personal Information"), but only in limited circumstances where permitted or required by applicable law and where relevant to the recruitment, hiring, accommodation, compliance, or employment eligibility process.
We may also invite applicants to voluntarily provide Equal Employment Opportunity (EEO) information, including certain demographic characteristics where permitted by law. Providing EEO information is entirely voluntary and will not affect an applicant’s eligibility for employment, consideration for a position, hiring decisions, or any other employment-related determination.
Contact Us
Questions regarding this Applicant Privacy Notice or requests concerning your personal information may be directed to FS-ISAC’s Privacy Officer at privacy@fsisac.com. We will review and respond to your request in accordance with applicable law. For applicants located in the European Economic Area or United Kingdom, you may also have the right to lodge a complaint with your local data protection authority.