The Agency for Personal Data Protection (AZOP) has issued a principle opinion on the modalities of communication of documentation from a recruitment process to an unsuccessful candidate.

Upon receiving a request from a candidate for the position of school principal wishing to obtain a copy of the selection process documentation, the authority recalled that the right to data protection is not absolute and must be balanced with the right to an effective remedy. A candidate must be able to verify the legality of the procedure and whether the successful candidate met the required conditions. Access can therefore be granted to the documents of the successful candidate that were directly relevant to the assessment of skills and the selection decision. However, this right is not unlimited and cannot justify the communication of the entire files of all candidates, which would be considered excessive. The school, as the data controller, must assess on a case-by-case basis the relevance of each requested document and apply the data minimization principle. Before any communication, information not necessary for verifying the procedure, such as address, date of birth, private contact details, signature, or special categories of data, must be redacted. The right of access provided for in Article 15 of the GDPR does not establish a right to obtain copies of other persons' files. The school must conduct this assessment in consultation with its data protection officer.