Blog › Published 2026-06-21

PDFs for HR teams: candidate packets, offer letters and GDPR-safe files

No department touches more sensitive paper than HR: identity documents, salaries, medical certificates, performance notes. And no department moves more of it around — to hiring managers, to payroll, to lawyers, to the employees themselves. Nearly all of it travels as PDF, which means a handful of PDF habits quietly determine whether personal data in your company is handled well or carelessly.

Hiring: one packet per candidate

Interviewers should never receive a loose pile of attachments. Merge CV, cover letter and work samples into a single file per candidate, named consistently — 2026-06_dev-backend_bianchi.pdf — and every interviewer opens one document instead of hunting through an email thread. When you need an anonymised summary for a first screening round, convert the CV to Word, carry over the experience and skills, and leave out the name, photo and birth date.

Offer letters that travel safely

An offer letter contains a salary, and salaries leak. Password-protect the PDF before it leaves the building and send the password through a different channel — a text message or a phone call, never the same email thread. It is a thirty-second habit that turns a forwarded email from an incident into a non-event, and it reads as professionalism from the candidate’s side of the table.

The onboarding bundle

First-day paperwork — contract, handbook, benefits forms, IT policy — works best as one merged document with numbered pages, so that “sign on page 14 and initial page 20” is an unambiguous instruction rather than a scavenger hunt across six attachments. Keep the master bundle per role, swap the personalised pages per hire, and new-starter Friday stops being a printing emergency.

Redact before you share

Salary reviews, disciplinary summaries and reference checks often need to circulate with some fields removed. A black highlighter drawn over text does not remove it — the words remain selectable underneath, one copy-paste away from being read. Use the editor’s true redaction, which deletes the text from the file, then verify: select the area, copy, paste into an empty note. If nothing appears, it is safe to share.

Drafts should look like drafts

Policy documents go through versions, and the expensive mistake is someone signing or citing version 0.9. A diagonal DRAFT watermark across every page costs nothing and makes the status of the document impossible to miss — on screen, in print, and in the thumbnail of a rushed manager’s inbox.

The personnel file, kept tidy

Employee files accumulate: certificates arrive photographed sideways, amendments get appended out of order. Ten minutes with the organizer — rotate the sideways scan, reorder the amendments after the contract, delete the duplicate — keeps each file readable for the next person who opens it, which in HR is often a person dealing with something urgent.

“The signed contract came back as fourteen photos”

New hires without a scanner sign on the kitchen table and photograph each page. Do not archive fourteen JPGs as an employment contract: convert the photos to one PDF in page order, straighten the sideways ones, and check every signature page made it before filing. Two minutes of assembly on arrival beats discovering page 9 is missing during a dispute three years later — the moment when missing pages are most expensive.

“An employee asked for a copy of their file”

Access requests are routine under GDPR, and the response is a document job: collect the file, remove pages that concern other people, apply true redaction to third-party names that must stay, and extract only the parts the request covers. Then send it password-protected — it would be a strange irony to leak personal data while answering a privacy request. A tidy personnel file turns this from a week of assembly into an afternoon.

“The handbook is 60 MB and the intranet refuses it”

Employee handbooks grow by accretion — photos from the last offsite, high-resolution org charts, scanned certificates — until the intranet, the mail server and half the phones in the company refuse to open them. Compress the distribution copy: image-heavy internal documents routinely shrink by 60–70% with no visible change. If the handbook has genuinely outgrown one file, split it into chapters so policies can be linked individually — people read the expense policy when they have an expense, not on page 84 of a monolith.

Retention has an end date

GDPR’s least-loved requirement is also the most concrete: personal data is kept only as long as needed. Rejected candidates’ documents are commonly held for around six months unless they consent to longer; former employees’ files follow statutory periods, not sentiment. A tidy, dated archive is what makes deletion actually possible — you cannot delete on schedule what you cannot find. Put the deletion dates in the calendar the day the file is created, and the hardest part of compliance becomes an appointment.