According to Article 25 of the Law on Personal Data Protection, the responsibility for protecting personal data of agencies, organizations, and individuals in labor recruitment is stipulated as follows:
a) Only be required to provide information serving the recruitment purpose of agencies, organizations, and individuals recruiting in accordance with the law; the information provided is only used for recruitment purposes and other purposes according to agreements in accordance with the law;
b) The information provided must be processed according to the provisions of law and must have the consent of the candidate;
c) Must delete or cancel the information provided by the candidate in case of non-recruitment, except in cases where there is a different agreement with the candidate.
Thus, in case the employee has provided personal data when participating in the recruitment but is not recruited, the recruitment agency or organization must delete or cancel that data, unless there is another agreement with the applicant.