Thanks to the European Union's General Data Protection Regulation (GDPR), the rules on the protection of personal data have entered a new level of protection, which imposes strict requirements on data controllers. One of the most basic, yet very exciting and sensitive areas in the field of personal data processing is the processing of personal data related to employment. However, little attention is paid to the data processes carried out by data controllers prior to the establishment of the employment relationship, to which, of course, the provisions of the GDPR also apply. The purpose of this study is to provide theoretical and practical guidance to data controllers on how to comply with the requirements for preemployment data processing. In the study, I mainly examine pre-employment data processing in a general way in the light of the GDPR, but in order to shed light on the individual issues in dispute, I examine the provisions of Slovak, Czech and Hungarian labor law.