They can hide everything apart from their profile pic. The profile doesn't even have to carry their name or even be a photograph of them.So its a company effectively doing a social media search on someone? Is that not really any different to someone applying for a job and the boss at the company deciding to go and try and look them up on social media, or more commonly, looking at their linkedin profile or something? I mean I don't know much about the GDPR but if I was hiring someone, I'd probably go and look at their facebook page, I mean I wouldn't want to be hiring someone who has loads of pictures of themselves smoking weed or something on their facebook page, or making abusive posts or racial or homophobic posts on social media. Or can a boss not go and look at their social media presence or something under GDPR?