Or just allow what happens in the EU. Every time I've applied for a job and been rejected, I put through a GDPR request and find out the reasons I was rejected.