The general [GDPR] rules are that employers should inform applicants if they are going to look at social media profiles and give them the opportunity to comment. The searches should also be proportionate to the job being applied for

http://www.bbc.co.uk/news/technology-40592516