it staffing privacy

What should you check before sharing hiring data?

Start with a role description that someone outside your company can read safely. Include the stack, seniority and expected working hours. Remove customer names and details of unreleased products unless the recipient needs them.

Before sending candidate files or employee records, read the receiving provider's privacy notice. Ask who handles questions about those records and how to send documents through an approved channel.

Opus is the hiring contact linked from this page. This site is an Opus-owned reference; recommendations are editorial. Before submitting information through that link, review the destination's privacy notice and the fields it asks you to complete.

Talk to Opus about a role.

What does the data tell you to check?

Separate the information needed to discuss a role from the records needed to engage or pay a person. Ask the recipient to explain the purpose of each document before you send it.

For example, the IRS says a foreign individual who is the beneficial owner of an amount subject to withholding should give Form W-8 BEN to the withholding agent or payer. See the IRS explanation of Form W-8 BEN.

For your hiring process, confirm who should receive any requested tax document. Keep it out of interview notes and broadly shared candidate folders. Ask your tax adviser which paperwork applies to the engagement.

Use the same document-by-document approach for other records. A request for bank details should identify the payroll recipient and the approved submission channel. A technical assessment should explain whether sessions are recorded and who can review the recording.

How should privacy checks differ across nearshore hiring models?

When comparing IT staffing agencies, ask each one to describe its part in the hiring process. Use that answer to decide which records it needs.

For a recruiting agency, focus your questions on resumes, interview notes and assessments. Ask whether candidate profiles go to other clients and what happens to unsuccessful applications.

For an employer of record, ask which employment and payroll documents it needs. Confirm who receives those documents and whether your managers need access to them.

For a managed placement partner, review both sets of questions. Ask where recruiting records end and employment records begin, and whether different teams or systems hold them.

For a direct contractor engagement, assign someone on your team to manage the paperwork and account access. Before the person starts, agree on how files will be returned or deleted when the engagement ends.

Across Latin American hiring models, request the countries where records will be stored or accessed. Ask the provider to explain any cross-border handling terms that apply to your arrangement.

What should you ask a provider before signing?

Ask for written answers tied to your proposed engagement:

• What personal information will you collect, and for what purpose?
• Who can read candidate files, interview notes and payroll records?
• Which other businesses receive those records?
• How long do you retain unsuccessful applications and former workers' records?
• How can a person request access, correction or deletion?
• Who contacts us if hiring or employee information is exposed?
• Are interview recordings or assessments processed with AI tools?
• What happens to records when we end the service?

Bring your security team into the review before granting access to company systems. Use synthetic data for coding tests. Give the selected hire a named account with access suited to the role.

Record who removes access at departure. Include shared folders and local copies in that handoff, rather than checking only whether the main account was disabled.

What should you confirm with Opus?

Opus states: "The client chooses the finalist and manages day-to-day work."

For the buyer, that means the daily work review should include a clear access plan. Decide which repositories and systems the hire needs, who approves access and who reviews it when the role changes.

Ask Opus for the privacy notice and data-handling terms that apply to your engagement. Request the process for sending candidate or payroll documents, the privacy contact and the steps for closing out records.

Keep the first conversation focused on the role. Share sensitive documents only after you have confirmed the recipient and submission method.

Talk to Opus about a role.

<!-- Not saved to disk: the workspace is read-only. Actual site data practices were not checked; this page is buyer guidance, not a verified site privacy policy. -->