Data processing for employment-related purposes are regulated by the GDPR and BDSG. We present the possibilities these norms offer for legally compliant data processing with their applications and limitations. Other than this legal foundation including e.g., consents we focus on the anonymization of data which leads to the non-applicability of the data protection law. As a conclusion we show a decision-making aid for applying these procedures in employment-related contexts.