Applying for work online can open doors across South Africa, from Johannesburg and Cape Town to smaller towns and remote roles. But every application also creates a record of your personal information, so it is important to know what to share, when to share it and with whom.
This Postings.co.za privacy and personal data guide for jobseekers explains how to protect your information while still giving employers enough detail to assess your application. The goal is not to hide your experience—it is to share it safely and professionally.
Why job application privacy matters
Your CV may include your full name, phone number, email address, work history, qualifications and location. In the wrong hands, these details can be used for identity theft, phishing, fake recruitment offers or unwanted marketing.
Online job boards and employers may also collect information through:
- Jobseeker profiles
- CV uploads
- Application forms
- Email communication
- Online assessments
- Cookies and website activity
- Recruitment agencies and third-party systems
South Africa’s Protection of Personal Information Act (POPIA) sets rules for how organisations should collect, use, store and share personal information. However, you should still take practical steps to control what you disclose.
Key takeaway: POPIA offers important protections, but careful sharing remains your first line of defence.
What information is normally safe to share?
A standard CV should provide enough information to show that you are suitable for the role without exposing unnecessary personal details.
Generally appropriate information
You can usually include:
- Your name and surname
- A professional email address
- A mobile phone number
- Your city, town or province
- A short professional summary
- Employment history
- Relevant skills and achievements
- Qualifications and training
- Professional certifications
- LinkedIn or portfolio links
- Notice period or availability
- Languages spoken, when relevant to the role
You do not need to list your full residential address. Writing “Soweto, Gauteng”, “Durban, KwaZulu-Natal” or simply “Cape Town” is usually enough to show your location.
For practical CV formatting advice, see this guide on how to protect your identity when uploading a CV online.
What should you avoid sharing at the first application stage?
Many jobseekers share too much because an advert appears official or a recruiter sounds convincing. Usually, an initial application only requires your CV, contact details and relevant supporting documents.
Avoid placing the following information in a public CV or sending it before the employer is verified:
| Information | Why you should protect it |
|---|---|
| South African ID number | Can be misused for identity theft or fraudulent accounts |
| Copy of your ID | Contains highly sensitive identifying information |
| Banking details | Employers do not need these to shortlist you |
| Internet banking login details or PINs | No legitimate recruiter should request them |
| SARS eFiling login details | Private account credentials must never be shared |
| Full residential address | Reveals where you live |
| Copies of bank statements | Usually unnecessary during recruitment |
| Medical records | Sensitive information that requires a clear, lawful purpose |
| Criminal record information | Should only be handled where relevant and properly explained |
| Passwords or one-time PINs | Never share these with anyone |
| Copies of utility bills | Only provide proof of address when genuinely required |
A legitimate employer may eventually request certain documents for onboarding, payroll, verification or a regulated position. That does not mean you should send everything at the application stage.
When may an employer request your ID or other documents?
Some employers need to verify identity, qualifications, right to work or professional registration. Government roles, financial services positions, security work and regulated occupations may involve additional checks.
The important question is timing and purpose.
Before sharing a sensitive document, ask:
- What information is being requested?
- Why is it necessary for this stage of recruitment?
- Who will receive and store it?
- How long will it be retained?
- Will it be shared with a background-check provider?
- Can I submit a redacted copy at this stage?
- Is there a secure upload method rather than ordinary WhatsApp or email?
If an ID copy is necessary, consider adding a watermark such as:
“Provided to [company name] for recruitment purposes only – [date].”
Do not cover information that the employer genuinely needs for a lawful verification, but ask whether unnecessary fields can be obscured. Keep a record of what you sent and when.
POPIA rights for jobseekers
POPIA generally requires responsible parties to process personal information lawfully, fairly and transparently. In plain language, an employer or recruitment platform should have a valid reason for collecting your information and should not use it in ways unrelated to that reason.
Your practical rights may include the ability to:
- Ask what personal information an organisation holds about you
- Request access to your information
- Ask for inaccurate information to be corrected
- Question how your information is being used
- Ask about third parties receiving your information
- Object to certain forms of processing
- Request deletion where appropriate and legally possible
- Withdraw consent where processing depends on consent
These rights may be limited by legal obligations, recordkeeping requirements, fraud prevention or an ongoing recruitment process. Personal data retention periods can also vary depending on the organisation and the reason for keeping the information.
If you want more detail on South African requirements, read this practical guide to POPIA-compliant job applications and the personal information you should share.
How to use Postings.co.za safely
When using Postings.co.za to search for vacancies or apply, create a profile that is useful without being unnecessarily exposed. Your profile should help employers understand your skills, experience and preferred work, but it should not become a complete identity file.
Safer profile practices
- Use a professional email address created for job hunting.
- Include your province or city instead of your full street address.
- Upload a CV that excludes your ID number and banking details.
- Use a strong, unique password for your account.
- Turn on multi-factor authentication if the platform offers it.
- Avoid reusing your email password on other websites.
- Log out on shared computers, libraries or internet cafés.
- Review who can view your profile and CV.
- Remove old documents that are no longer needed.
- Check the website address before entering login details.
If you are new to the platform, start with this Postings.co.za jobseeker login and registration guide. Take a moment to check the account settings before uploading your CV.
How to recognise privacy policy red flags
Before creating an account or submitting personal information, read the platform’s privacy notice. You do not need to understand every legal phrase, but look for clear answers to basic questions.
A useful privacy policy should explain:
- What information is collected
- Why the information is collected
- How it is stored
- Who it may be shared with
- Whether recruiters or employers can download your CV
- How long information is retained
- How you can request access or correction
- How you can contact the information officer
- How you can delete or close your account
Be cautious if the policy is missing, extremely vague or gives the organisation broad permission to share your information for unrelated marketing. Also take care if you cannot identify the company operating the website or if an application redirects you to an unfamiliar domain.
A privacy policy does not automatically prove that a job advert is genuine. You should still verify the employer and vacancy separately.
Third-party recruiters and data sharing
Recruitment agencies may share your CV with potential employers, background-check services, payroll providers or assessment companies. This can be reasonable when it is connected to a genuine recruitment process, but you should know what is happening.
Ask a recruiter:
- Which employer is hiring?
- Has my CV already been submitted elsewhere?
- Will you share it with other employers?
- Can I approve submissions before they are made?
- How can I withdraw from the recruitment database?
- How long will you retain my details?
Keep track of recruiters and applications so you know where your information has gone. A simple spreadsheet can record the company, recruiter, vacancy, documents sent and follow-up date. You can use this job application tracking guide to organise the process.
Warning signs that a request may be a scam
A request for personal information deserves extra scrutiny when it is combined with pressure, secrecy or a promise of guaranteed employment.
Watch for these warning signs:
- You are asked to pay a registration, training or background-check fee.
- The recruiter requests your banking PIN or one-time password.
- You receive an offer without a proper interview.
- The email address uses a free service but claims to represent a major company.
- The recruiter refuses to identify the employer.
- You are told to send your ID immediately through WhatsApp.
- The salary is unusually high for little or no experience.
- You are pressured to act “within the next hour”.
- The job advert has vague duties and no verifiable company details.
- You are asked to receive or transfer money through your bank account.
Never pay to apply for a legitimate job. If you have already shared sensitive information with a suspected scammer, follow these immediate recovery steps after sharing personal information with a recruitment scammer.
What to do if you have overshared
Do not panic. Quick, organised action can reduce the risk.
- Contact the organisation and ask why the information was requested.
- Request confirmation of how it will be stored and whether it was shared.
- Ask for deletion if there is no lawful reason to retain it.
- Change passwords if you shared login details or reused a password.
- Contact your bank immediately if banking information was exposed.
- Monitor your bank accounts, email and mobile number for unusual activity.
- Report identity theft or fraud to the relevant authorities.
- Keep screenshots, emails, phone numbers and payment records.
- Warn the job platform if the vacancy or recruiter appears fraudulent.
If your ID document was shared, be particularly alert for suspicious accounts, loan applications or SIM-swap attempts. Do not respond to follow-up messages asking for OTPs or additional “verification” payments.
A simple privacy checklist before you apply
Use this checklist for each online application:
- I have verified the employer and vacancy.
- My CV does not include my ID number or banking details.
- My contact email is professional and secure.
- I have included my city or province, not my full address.
- I understand why each requested document is needed.
- I am using a secure website or verified employer email.
- I have checked the privacy policy.
- I know whether a recruiter will share my CV with third parties.
- I have recorded what information I submitted.
- I will not pay money or share passwords and OTPs.
Final advice for safer job applications
You can apply confidently without handing over your entire identity file. Share enough information to demonstrate your suitability, then provide sensitive documents only when the employer is verified, the purpose is clear and the recruitment stage justifies the request.
Key takeaway: A strong application focuses on your skills, experience and potential—not unnecessary personal data. Use Postings.co.za thoughtfully, review privacy settings regularly and pause whenever a request feels rushed or excessive.