Introduction: the CV you sent to a hundred strangers
A rental application goes out to forty people. A CV goes out to a hundred. Sometimes three hundred, when the search drags on.
And what does it contain? Your full name. Your date of birth, often. Your exact home address. Your personal phone number — the only one, the one you've kept for fifteen years. Your main email address, the same one used to reset your bank account. Your detailed career history, meaning a precise map of your last ten years: who employed you, when, where, alongside whom. Sometimes a photo. Sometimes your family situation, "to make it feel more human."
You uploaded this document to job boards whose hosting provider you know nothing about, passed it on to recruitment agencies that sometimes resell it as part of a "talent pool," sent it to generic recruitment@ addresses read by an intern, loaded it into ATS platforms (applicant tracking software) hosted outside Europe, and entrusted it to "headhunters" met on a professional network whose real existence you never verified.
You haven't retrieved a single one of those copies. You don't know how long they're kept. And if you're still employed, each of those copies is also sensitive information about your intention to leave.
This guide isn't about sabotaging your job search in the name of privacy. It's about knowing the real list of what can legitimately be required — it's shorter than you'd think —, spotting unintended traces, and putting in place a few compartmentalisation habits that take nothing away from your chances.
What the law actually allows a recruiter to ask
Contrary to popular belief, an employer doesn't get to ask whatever they want. French labour law strictly regulates the collection of information during recruitment.
The relevance principle
Article L. 1221-6 of the French Labour Code is unambiguous: information requested from a candidate "may have no purpose other than assessing their capacity to occupy the position offered or their professional aptitudes." And it must bear a direct and necessary link to the job.
In other words: anything that doesn't serve to assess your suitability for the role has no business being collected. Not asked verbally, not ticked in a form, not inferred from a profile.
Article L. 1221-8 adds that candidates must be informed, in advance, of the assessment methods and techniques used. Surprise personality tests at the end of an interview, unannounced filmed role-plays, video interviews analysed by an algorithm: all of these require prior disclosure.
Prohibited questions
The CNIL and the Défenseur des droits regularly restate a list of topics that have no place in a recruitment process:
| Topic | Status |
|---|---|
| Family situation, plans for children, pregnancy | Prohibited |
| Origin, nationality (except work authorisation), religion | Prohibited |
| Political opinions, trade union membership | Prohibited |
| Health status, disability (except fitness assessed by the occupational physician) | Prohibited |
| Sexual orientation | Prohibited |
| Financial situation, loans, overdrafts | No direct link in the vast majority of roles |
| Criminal record | Only for certain jobs expressly provided for by law |
| Photo, age, precise address | Not mandatory |
The fact that a question is asked "kindly," "just out of curiosity" or "for team-spirit reasons" changes nothing about its legal status. And the Défenseur des droits has documented it repeatedly: it's often at the most informal moment — coffee after the interview, the walk to the lift — that problematic questions surface.
The useful reflex: faced with an out-of-scope question, there's no need to deliver a law lecture. A neutral answer will do: "I'd rather we stay on the role — actually, I have a question about the team." Redirecting beats confrontation, unless you've already decided the company isn't for you.
Data retention
On the GDPR side, the CNIL considers that an unsuccessful candidate's data may be kept for a maximum of two years after the last contact, unless they object. Many companies and agencies keep it far longer, in "talent pools" that have sometimes never been purged since they were created.
You have the standard rights: access, rectification, erasure, objection. An email to the company's GDPR contact address, citing Article 17 of the GDPR, is enough to start the one-month response deadline.
The traces you don't see in your application
The visible content of a CV is only part of the problem. The file itself talks.
File metadata
A PDF exported from a word processor embeds, by default, a series of details: author name (often your computer's account name, sometimes your partner's if you used their machine), software used, creation date, last modified date, and sometimes the original file path.
That last point is the most revealing. A path like /Users/first.last/Documents/Applications/2026/Direct-competitor/CV.pdf tells the whole story: that you're applying in bulk, to whom, and since when.
Cleaning it up is simple:
- On Windows: right-click the file → Properties → Details → "Remove Properties and Personal Information."
- On macOS: re-export as PDF via Preview, or use a metadata-cleaning tool.
- File name:
CV-First-Last.pdfis perfect.CV-v7-final-proofread-by-dad.pdffar less so.
The same reasoning applies to Word documents: deleted comments, tracked changes and edit history sometimes remain accessible. Sending a PDF rather than a .docx is, from this standpoint, always preferable.
Trackers in emails and platforms
Some recruitment platforms and agencies use tracking pixels in their emails: message opening, time, device, sometimes approximate location. That isn't illegal in itself, but it does mean your behaviour as a candidate is being measured — including the fact that you viewed a job posting at 2pm on a Tuesday, from your current employer's network.
Disabling automatic image loading in your mail client is the simplest countermeasure, and it costs nothing.
The professional profile that gives the search away
On professional networks, a shift in activity is immediately legible: a sudden profile update, added skills, a wave of connections with recruiters from the same sector, switching on an "open to opportunities" status. Privacy options do exist — turning off profile-change broadcasting, restricting status visibility to recruiters — but they're imperfect and change regularly.
The realistic rule: assume that any activity on a professional network is potentially visible to your current employer, including via a colleague, and pace yourself accordingly.
Applying while still employed: the trickiest case
This is the most common situation, and the most poorly handled. Looking for a job while employed is neither illegal nor disloyal: your employment contract doesn't prohibit applying elsewhere, as long as you don't poach clients and you honour your duty of loyalty while the contract is in force. But the information remains sensitive.
Keep the channels strictly separate
The principle is the same as for any compartmentalisation strategy: nothing related to the job search goes through the employer's resources.
- No work email as your contact address, not even "just for this one application."
- No application sent from the company computer, or over its Wi-Fi network.
- No CV file stored on the company cloud or on the work machine's drive.
- No phone interview taken from a meeting room booked in your name.
In France, an employer may inspect files stored on a work computer as soon as they aren't identified as "personal," and internet connections made from that workstation are presumed to be work-related. The Cour de cassation's case law is consistent on this point. This isn't paranoia: it's employment law as it stands.
For video interviews from home, a wired headset with microphone avoids two nuisances at once: the feedback that ruins the conversation and being accidentally overheard by a flatmate. And an external webcam with a physical cover lets you control exactly what's visible — both the framing and the timing.
A second number: the single most effective measure
Your phone number is the most persistent piece of data in your digital life. It follows you from employer to employer, it serves as an identifier for dozens of services, it lets any recruiter call you back three years later, and it can be cross-referenced in commercial databases.
Using a number dedicated to the job search changes everything:
- a no-commitment prepaid SIM card in a spare phone;
- or a second number via an app, on a dual-SIM smartphone;
- or, for one-off exchanges, a channel that doesn't reveal your main line.
The benefit isn't only discretion during the search. It's also being able to abandon that number once you're hired, and cutting off follow-ups from agencies that will never have purged their talent pool.
This is also where an anonymous SMS-sending service finds a legitimate use: flagging your availability, confirming an appointment, warning of a delay, without exposing your personal line to a company you know nothing about. The message goes out, the information arrives, and no lasting identifier changes hands.
A dedicated email address
Same logic: an address created specifically for the search, with a reputable provider, separate from your main address. It centralises job board alerts, it absorbs the spam that will inevitably follow, and it can be deleted the day the search ends.
Avoid whimsical addresses, though: application.flast@… works perfectly, jobseeker99@… produces the opposite of the intended effect.
The minimal CV: what you can leave out without penalty
Many traditional items on a French CV are a matter of habit, not usefulness.
| Item | Should you include it? |
|---|---|
| First and last name | Yes |
| Full postal address | No — the city or metropolitan area is enough |
| Date of birth | No |
| Photo | No — and leaving it out is increasingly commonplace |
| Family situation | Never |
| Driving licence / vehicle | Only if the role requires it |
| Phone number | Yes, but ideally the dedicated number |
| Links to personal social networks | No — only the professional one, if relevant |
Removing your precise address has a concrete benefit: it's used, consciously or not, as a screening criterion ("he lives too far away," "that neighbourhood…"). The Défenseur des droits has repeatedly documented discrimination based on place of residence, which has in fact been a prohibited criterion since 2014.
For those sending lots of paper applications or who need to submit copies of diplomas, a portable scanner with a document feeder lets you digitise cleanly at home rather than leaving documents lying around in the office photocopier — a classic of the genre.
Checking the other side: who are you sending your data to?
The asymmetry of recruitment is total: the company knows everything about you before it even replies, and you often know nothing about it. A few quick checks beat a regret.
Fake job postings
They exist, and they've become professionalised. Three main families:
- Ghost postings: roles published with no real intention to hire, meant to build a talent pool or gauge a market. Cost to you: your complete file, for nothing.
- Disguised data collection: forms asking very early for an ID document, bank details, a social security number "to prepare the contract." None of these are needed before an actual hire.
- Classic scams: an offer of a very well-paid remote role, followed by a request for an advance payment for equipment, or a "test" consisting of receiving and then forwarding money.
Minimum checks
- Does the company exist? A SIREN number can be verified in thirty seconds on the French government's business directory.
- Does the recruitment agency have an address, a website, legal notices, a readable privacy policy?
- Does the email address domain match the official website, or is it a free address?
- Is the posting published elsewhere, notably on France Travail?
Bank details, ID documents, social security number
These three documents are handed over only after a formal job offer or at contract signature, to the actual employer, and through an identified channel. No legitimate selection process needs them beforehand. A candidate who politely declines to provide them before being hired isn't a difficult candidate: they're an informed one.
After applying: taking back control of your data
The search ends, the traces remain. Three actions that take an hour in total:
- Request erasure from the companies and agencies that never followed up. A template message is enough: a reminder of the application date, a request for erasure under Article 17 of the GDPR, a request for written confirmation. Response deadline: one month.
- Delete job board accounts rather than simply "deactivating" the profile. Deactivation retains the data; deletion triggers the purge.
- Sort out the alerts: recruitment newsletters often outlive the hire by years.
And going forward: archive your own documents properly, somewhere that is neither your inbox nor an employer's cloud. A hardware-encrypted USB drive, stored with your important papers, solves the problem for ten years and spares you from rebuilding your file with every job change.
To go further on the overall logic — separating identities, limiting cross-referencing, choosing what you expose and to whom —, a reference book on digital hygiene makes a good long-term companion, well beyond the job-hunting episode alone.
Summary: the discreet candidate's checklist
Before sending
- CV with no precise address, no date of birth, no photo, no family situation
- PDF metadata cleaned, neutral file name
- Email address dedicated to the search
- Dedicated phone number rather than your main line
During the process
- Nothing related to the search on the current employer's tools or network
- Verification that the company and agency genuinely exist
- No ID document, no bank details, no social security number before an actual hire
- Polite redirection when faced with out-of-scope questions
Afterwards
- GDPR erasure requests to applications that went nowhere
- Deletion (not deactivation) of job board accounts
- Abandoning the dedicated number once the job is secured
Conclusion: discretion isn't a handicap
The objection always comes back: "If I leave information out, I'll look suspicious, and it'll cost me the job."
In practice, the opposite proves true more often. A CV with no photo, no date of birth and no full address is a CV that forces the recruiter to look at skills. A candidate who doesn't hand over their bank details before a job offer is a candidate who won't be scammed. And a candidate who protects the confidentiality of their search demonstrates, without saying so, exactly the quality they'll be asked for in their future role: knowing how to handle sensitive information without letting it leak.
The real asymmetry isn't between those who give everything and those who give little. It's between those who know what they're giving and those who don't.
