The CV photo question, answered by country
Few CV questions cause more confusion than the photo. In some European countries a photo is still expected; in others it marks you as an outsider — or worse, triggers the employer’s bias alarms and gets your application quietly filtered. The rules are shaped by two forces: national hiring culture and EU-wide data protection law (GDPR). This guide gives you a country-by-country answer for 2026, explains what personal data to include and what to strip out, and shows how GDPR actually protects you as a job applicant.
For the overall structure of a winning application, see our European CV format guide and the companion cover letter guide.
Photo or no photo? A 2026 country table
| Country | Photo expected? | What to do in 2026 |
|---|---|---|
| Germany | Traditionally yes, now optional | The classic German Bewerbungsfoto is fading; a professional photo is still accepted but increasingly omitted, especially in tech and international firms |
| France | Common but not required | Photos remain normal on French CVs, but anti-discrimination pressure is growing; omit it for international companies |
| Spain | Often expected | A professional headshot is still standard in traditional sectors |
| Italy | Common | Photos are normal, though multinationals increasingly prefer photo-free CVs |
| Netherlands | No | Dutch employers generally prefer no photo; including one looks old-fashioned |
| Ireland / UK-style market | No — avoid | Photos are strongly discouraged; employers may discard CVs with photos to avoid bias claims |
| Poland | Common in traditional roles | Expected in many local companies; optional for international employers |
The safe default: if you are applying across borders or to international companies, leave the photo off. No employer in Europe will reject a strong CV for lacking a photo, while a photo can — consciously or not — invite discrimination based on age, ethnicity, or appearance. When in doubt, let your experience do the talking.
What personal data to include — and what to delete
Beyond the photo, European CVs traditionally carried a surprising amount of personal detail: date of birth, marital status, nationality, even the names and ages of children. In 2026, the trend is firmly toward less. Here is the modern standard:
Keep it
- Name and contact details: full name, phone number with country code, professional email address, city and country of residence. A full street address is no longer necessary — city and country suffice.
- LinkedIn profile: a complete, matching LinkedIn URL. Recruiters will check it anyway; make it easy for them. See our LinkedIn optimisation guide.
- Work authorisation status: one line such as “Authorised to work in the EU” or “Require visa sponsorship” saves everyone time — especially for non-EU applicants. Honesty here is far better than silence.
- Languages: list with honest proficiency levels (native, fluent, professional, basic). Language skills are a genuine hiring criterion across Europe.
Remove it
- Date of birth and age: not required anywhere in the EU, and requesting it is restricted in several countries. Age discrimination is illegal under EU law — do not volunteer the data.
- Marital status and children: irrelevant to your ability to do the job. Delete.
- Religion, political views, health information: never on a CV. These are “special category” data under GDPR with the strongest protections.
- National ID numbers, passport numbers: never include these on an initial application. They are only needed at the contract stage, through secure HR channels.
- Nationality: optional. If you need a visa, the “work authorisation” line above covers it more usefully. Some applicants include nationality to explain language skills; otherwise leave it off.
How GDPR protects you as a job applicant
The General Data Protection Regulation applies to your job application from the moment you hit send. Key rights that matter in hiring:
- Data minimisation: employers may only collect personal data that is necessary for the recruitment decision. A request for your marital status, a photo when the role does not need one, or your exact date of birth is hard to justify — and you are entitled to ask why it is needed.
- Purpose limitation: your CV may be used for the recruitment process, not added to a marketing database or shared with third parties without a legal basis.
- Storage limits: rejected applications should not be kept indefinitely. Many companies set retention periods (often 6–12 months) and must delete your data afterwards unless you consent to stay in a talent pool.
- Right of access and erasure: you can ask what data an employer holds about you from the process, and you can request deletion. If you withdraw from a process, ask for your data to be removed.
- Automated screening: if an AI tool screens your CV, GDPR gives you rights around automated decision-making — including the right to request human review of a significant decision in many cases.
Practical tip: when a clunky application portal demands excessive personal data (full address history, national ID, date of birth) just to submit a CV, consider whether that employer’s data practices reflect its culture. You can often leave non-mandatory fields blank.
Anti-discrimination law: why less data helps you
EU law prohibits discrimination in employment on grounds including sex, racial or ethnic origin, religion or belief, disability, age, and sexual orientation. Many member states go further. The practical consequence for your CV: every personal detail you include is a detail that could — illegally but really — bias a tired recruiter skimming 200 applications.
- Names alone can trigger bias, which is why some large employers now use blind screening (hiding names and photos in the first round). You cannot control that, but you can avoid adding fuel.
- In the Netherlands, Ireland, and the UK-influenced markets, a photo or date of birth on a CV can make HR departments uncomfortable, because it creates exactly the liability their policies try to avoid.
- In France, the law restricts the personal information employers may request to what is directly relevant to assessing professional capability.
The direction of travel is clear: European hiring is moving toward skills-based screening. A CV that leads with achievements, quantified results, and relevant skills — and carries minimal personal data — is both legally safer and more modern.
Special cases: when personal data actually matters
There are legitimate exceptions where more personal information is normal:
- Regulated professions: medicine, law, and finance roles may require proof of nationality, professional registration, or clean records — but through formal application channels, not the CV.
- Security clearance roles: defence and some government-adjacent positions legitimately need extensive background data, collected through dedicated vetting processes.
- Creative and client-facing roles: modelling, acting, and some media roles genuinely require a photo or portfolio — that is the product, not bias.
- Visa-sponsored roles: stating your current work authorisation and whether you need sponsorship is practical information that speeds up the process for everyone.
The 2026 CV personal-data checklist
- Remove the photo unless you are sure the specific market and sector expect it.
- Delete date of birth, age, marital status, and children.
- Replace your full street address with city + country.
- Never include ID numbers, passport numbers, religion, or health data.
- Add one clear line about work authorisation / visa sponsorship needs.
- Keep name, phone (+country code), professional email, LinkedIn, and languages.
- Before submitting, ask: “does this detail help them judge my ability to do the job?” If not, cut it.
Pair this with a strong structure from our European CV format guide, optimise your LinkedIn profile to match, and browse live openings on the jobs board or the Germany, France, Netherlands, and Ireland country pages.