In SmartRecruiters, managing consent requests is essential for compliance with data privacy regulations. Candidates may enter the system through various channels, such as manual addition, referrals, or agency submissions, and might not have provided their consent yet.
SmartRecruiters’ Custom Consent Requests let admins tailor the emails recruiters send to candidates when requesting review of their privacy policy and consent, with content and delivery automatically aligned with each candidate’s country settings and job ad language.
By default, SmartRecruiters uses a default template for consent request emails. Utilizing the default template is generally recommended, especially if you advertise jobs in multiple languages. The system automatically translates the consent request emails based on the candidate's application language.

However, if you prefer to create custom emails, you can disable the default template and add templates in various languages. SmartRecruiters offers three types of consent request emails:
- No Deletion (when GDPR is disabled): This email is sent to candidates who applied for a job in a country where the GDPR setting is disabled. While consent is requested, the candidate's profile will not be automatically deleted after thirty days. Instead, it will be subject to the standard data retention period. You can view the content of this email by clicking the edit icon. The email informs the candidate about the consent request and provides a link to review the privacy policy.
- Deletion after 30 days: This is the initial email sent to candidates who applied for a job in a country where the GDPR setting is enabled. The email informs the candidate that their profile will be deleted within 30 days if they do not provide consent. It also includes a link to review the privacy policy and grant consent.
- Deletion reminders: These emails are sent as reminders to candidates who have not yet provided consent and are nearing the 30-day deletion deadline. Two reminders are sent: one seven days before deletion and another two days before. Like the initial email, these reminders provide a link to review the privacy policy and highlight the impending deletion.
This setup supports profile-level consent management and safeguards data handling by clearly communicating retention outcomes if a candidate does not respond within 30 days.
There are two approaches that you can take to consent requests:
- Use the SmartRecruiters default template.
- Use Custom Consent Requests that you create.
You might decide to use custom consent requests to control branding, localization, and legal wording across countries and scenarios. Providing complete, language-specific sets prevents fallback to generic defaults and keeps consent messaging consistent and compliant.
Note

