Data protection is a critical concern during BPSS checks, given the sensitive information involved. This article outlines how to conduct BPSS checks in compliance with the General Data Protection Regulation (GDPR). We cover the principles of lawful processing, data minimization, and secure storage. The article provides practical tips for employers on obtaining consent, handling data breaches, and ensuring transparency with candidates. Checkback's processes are designed with GDPR compliance at the forefront, giving organizations peace of mind that candidate data is handled responsibly and legally.