> The candidate gets back a formatted dump by email of all sorts of recruitment data, including interview notes, etc.
Interview notes would not have to be turned over to the candidate. They are personal opinion of the interviewer even if they mention the candidate. GDPR protects that data: you may not disclose it because it would violate the rights of the interviewer.
This level of detail relating to interview notes isn't in there, and all references to "opinion" refer to the decision-making by the regulatory body.
Most people seem to interpret the directive to say that, because the interview notes constitute "any information relating to an identified or identifiable natural person", they are personal data of the person being interviewed?
Interview notes would not have to be turned over to the candidate. They are personal opinion of the interviewer even if they mention the candidate. GDPR protects that data: you may not disclose it because it would violate the rights of the interviewer.