Recruitment skill tests, including personality questionnaires, cognitive tests, games, and writing tests, process personal data and often psychometric data as well. This means they fall directly under the GDPR. Organizations that use assessments must clearly establish in advance what data will be processed, for what purpose, on what legal basis, how transparency and candidate rights are guaranteed, and what retention periods and security measures apply. Below is a coherent framework that addresses both legal requirements and practical implementation, including how Selection Lab typically organizes this.
A recruitment skill test is any structured measurement tool that assesses competencies, cognitive abilities, behavioral preferences, or work-related characteristics for the purpose of selection or development. The results are personal data; raw response data and derived profiles (construct and domain scores, match scores) are also subject to the GDPR. Psychometric data can be considered particularly sensitive in some contexts because it is in-depth, potentially impactful, and difficult to change. As a result, high standards apply to data minimization, purpose limitation, security, and the rights of data subjects.

Recruitment skill tests, including personality questionnaires, cognitive tests, games, and writing tests, process personal data and often psychometric data as well. This means they fall directly under the GDPR. Organizations that use assessments must clearly establish in advance what data will be processed, for what purpose, on what legal basis, how transparency and candidate rights are guaranteed, and what retention periods and security measures apply. Below is a coherent framework that addresses both legal requirements and practical implementation, including how Selection Lab typically organizes this.
A recruitment skill test is any structured measurement tool that assesses competencies, cognitive abilities, behavioral preferences, or work-related characteristics for the purpose of selection or development. The results are personal data; raw response data and derived profiles (construct and domain scores, match scores) are also subject to the GDPR. Psychometric data can be considered particularly sensitive in some contexts because it is in-depth, potentially impactful, and difficult to change. As a result, high standards apply to data minimization, purpose limitation, security, and the rights of data subjects.