---
title: "Candidate consent decisions"
method: GET
path: "/candidates/{id}/consents"
tags: ["candidates"]
---

# Candidate consent decisions

`GET /candidates/{id}/consents`

## Request

- Base URL: `https://api.smartrecruiters.com`
- URL: `https://api.smartrecruiters.com/candidates/{id}/consents`
- Auth: one of:
  - API key in header `x-smarttoken`
  - OAuth 2
    - Authorization code: `https://www.smartrecruiters.com/identity/oauth/allow`
    - Token URL: `https://api.smartrecruiters.com/identity/oauth/token` scopes: `candidates_read`

Depending on the consent approach which a customer chooses, the response will either contain one candidates'
consent decision - known as "single consent" - or contain one candidates' consent broken out by the data scopes
which the customer has subscribed to - such as SmartRecruit and SmartCRM. This is referred to as "separated consent".
Provided there is at least one pending consent request (without a decision) for a candidate, the response
contains a date and time of the most recent of such consent requests.

Read more about GDPR tools on [SmartRecruiters Help Center](https://customers.smartrecruiters.com/kb/articles/2273-compliance-and-gdpr-tools-for-companies)

## Response `200`

Candidate's consent decisions

- CandidateConsentDecisions
  - `decisions` ConsentDecision[], required
    - `status` 'acquired' | 'declined' | 'required', required: * **acquired** - a candidate has decided to provide a consent * **declined** - a candidate has decided to decline a consent * **required** - a candidate has not made any decision yet,
    - `scope` 'Single' | 'SmartRecruit' | 'SmartCRM' | 'SmartMessage:SMS' | 'SmartMessage:WhatsApp', required: Available when company uses single consent approach: * **Single** - a single consent to company privacy policy for all scopes Available when company uses separated consent approach: * **SmartRecruit** - indicates reading and understanding or accepting company privacy policy for job applications, * **SmartCRM** - a consent to be part of company communities for future career opportunities, * **SmartMessage:SMS** - a consent to receive text/SMS messages for job applications and/or future career opportunities, * **SmartMessage:WhatsApp** - a consent to receive WhatsApp messages for job applications and/or future career opportunities.
    - `decidedOn` string, date-time: present when candidate has made a consent decision (i.e. `status` is `acquired` or `declined`)
  - `recentPendingRequestCreatedOn` string, date-time

## Other responses

- `403`: Candidate access denied

---

[API](https://skmtc.dev/smartrecruiters/apis/candidates-api.md) - [All operations](https://skmtc.dev/smartrecruiters/apis/candidates-api/llms.txt) - [OpenAPI document](https://skmtc.dev/smartrecruiters/apis/candidates-api/revisions/8fde9b33d46d?raw)