The Internet Applicant Rule is a federal regulation, codified at 41 CFR 60-1.3, that defines when someone who applies for a job electronically becomes an “applicant” a federal contractor has to track for recordkeeping and nondiscrimination purposes. A job seeker qualifies only when four specific conditions are all met. The rule’s original legal foundation, Executive Order 11246, was revoked on January 21, 2025, and the Department of Labor stopped enforcing its regulations, but parallel obligations to track applicants continue under Section 503 of the Rehabilitation Act and the Vietnam Era Veterans’ Readjustment Assistance Act (VEVRAA).
The Four Conditions That Make Someone an Internet Applicant
A person becomes an internet applicant only when every one of these is true:
- They express interest in employment through the internet or a related electronic technology. That covers a company career portal, a third-party job board, email, fax, a mobile app, or an electronic kiosk.
- The contractor actually considers them for a particular, identifiable position. A resume sitting untouched in a database is not “considered.”
- Their application or resume shows they meet the basic qualifications for the role.
- They do not withdraw before receiving an offer. Withdrawal includes declining further consideration, failing to respond to interview requests, or indicating on the application that they cannot meet the position’s salary or schedule requirements.
Miss one condition and the person does not count. That matters, because every person who does count triggers demographic data collection, documentation of the hire-or-reject decision, and multi-year retention of the file.1eCFR. 41 CFR 60-1.3 – Definitions
What Counts as a Basic Qualification
The third prong causes most compliance mistakes. A qualification is “basic” only if it is non-comparative, objective, and advertised before any screening begins.
Non-comparative means the standard is fixed, not measured against the rest of the pool. “Three years of project management experience” is non-comparative. “Among the top five most experienced candidates” is comparative and cannot serve as a basic qualification.
Objective means a knowledgeable third party could apply the standard without the employer’s subjective judgment. “Bachelor’s degree in accounting” is objective. “Bachelor’s degree in accounting from a highly ranked school” is not, because “highly ranked” depends on the evaluator.2U.S. Department of Labor. Recordkeeping Rule Clarifies OFCCPs Definition Of Job Applicant for Internet and Related Technologies
Advertised in advance means the criteria have to be posted before candidates are screened against them. If a posting lists only “CPA license required” and “five years of audit experience,” those are the only criteria you can use to filter internet applicants for that search. Adding a new requirement mid-process invites a compliance finding.
How the Rule Differs for Traditional Applicants
Not everyone who applies falls under the internet framework. Someone who walks in with a paper resume, mails an application, or expresses interest in person at a job fair is a “traditional applicant.” That definition is simpler: the person expresses interest in a job (usually in writing, sometimes orally) and does not withdraw before an offer. The basic-qualifications and consideration prongs do not apply the same way.3U.S. Department of Labor. Understanding OFCCPs Internet Applicant and Traditional Applicant Recordkeeping Requirements
In practice, most hiring runs electronically, so the internet applicant test is the one contractors face daily. The traditional track still matters in industries that rely on in-person hiring events or union hall referrals.
The 2025 Change: EO 11246 Revoked, Enforcement Halted
On January 21, 2025, Executive Order 14173 revoked Executive Order 11246, which had been the legal basis for the Internet Applicant Rule and most other OFCCP contractor obligations since 1965. The Department of Labor stopped enforcing the EO 11246 regulations immediately and took the position that those rules are “null and void” for lack of legal authority.4Federal Register. Rescission of Executive Order 11246 Implementing Regulations
In July 2025, DOL proposed formally removing the corresponding parts of Title 41 from the Code of Federal Regulations. Federal contractors no longer face OFCCP enforcement for EO 11246-specific obligations, including affirmative action plans based on race, color, sex, religion, or national origin. So if the question is whether you still have to run applicant tracking under the old EO 11246 framework specifically, the answer is no.
What Still Applies: Section 503 and VEVRAA
The revocation did not clear the slate. Two federal statutes operate independently of the executive order and remain fully in effect: Section 503 of the Rehabilitation Act, covering individuals with disabilities, and VEVRAA, covering protected veterans. Both are enforced by OFCCP, and both carry their own recordkeeping, outreach, and affirmative action requirements.
DOL has proposed moving the administrative enforcement procedures that used to sit in the EO 11246 regulations into the Section 503 and VEVRAA frameworks so those programs can operate on their own. The proposed Section 503 rules preserve nearly identical record retention: two years for larger contractors, one year for contractors with fewer than 150 employees or federal contracts below $150,000.5Federal Register. Modifications to the Regulations Implementing Section 503 of the Rehabilitation Act of 1973 as Amended
The practical takeaway: if you are a federal contractor covered by Section 503 or VEVRAA, you still need to track applicant data, offer self-identification for disability and veteran status, and retain the records. The internet applicant concept remains relevant for these programs even though the EO 11246 version of it is no longer enforced. The current VEVRAA hiring benchmark for protected veterans is 5.1% of new hires.6U.S. Department of Labor. VEVRAA Hiring Benchmark
Coverage thresholds for the surviving statutes are different from each other. Section 503 applies to federal contracts of $15,000 or more. VEVRAA applies to contracts of $150,000 or more. A contractor may be covered by one but not the other.
Records You Have to Keep, and for How Long
For each person who meets the internet applicant definition, save the resume, the cover letter, and the application itself. Save the internal screening notes, interview evaluations, and the specific reason for each rejection. Rejection reasons matter most. Vague notes like “not a fit” invite scrutiny; a documented mismatch with a posted basic qualification is defensible.
Contractors also have to request voluntary demographic information from applicants and, under Section 503 and VEVRAA, offer self-identification forms for disability status and veteran status. These are voluntary for the applicant but mandatory for the contractor to offer. If applicants decline, document the offer.
The default retention period is two years from the date the record was created or the personnel action took place, whichever is later. Contractors with fewer than 150 employees or a federal contract below $150,000 have a one-year minimum.7eCFR. 41 CFR 60-1.12 – Record Retention Those same tiers appear in DOL’s proposed Section 503 revisions, so the timeframes are expected to survive the rescission unchanged.5Federal Register. Modifications to the Regulations Implementing Section 503 of the Rehabilitation Act of 1973 as Amended
Electronic storage is fine as long as the records are accessible and retrievable. A folder of unsearchable scanned images technically qualifies, but it will slow down any compliance review. Organized digital files tied to specific job requisitions hold up better.
Managing Large Applicant Pools
One online posting can generate thousands of expressions of interest. The rule anticipates this through the “consideration” prong: if you never consider a particular submission, that person never becomes an internet applicant. Two accepted techniques narrow the pool before that point.
The first is limiting expressions of interest. A contractor might announce it will review only the first 50 resumes submitted for a position, capping the pool up front. The second is random sampling, pulling a proportionally representative subset of submissions. Either is acceptable as long as the technique is applied consistently, documented, and not used to exclude protected groups.
When searching an internal resume database or an external job board, record the position being filled, the search criteria used, and the date of the search. For internal databases, note the date each resume was added. These records prove who was actually pulled up and reviewed, and that in turn determines who counts as an internet applicant. Clean search logs are far easier to keep in the moment than to reconstruct during an audit.
Why the Tracking Exists: Adverse Impact Analysis
The point of collecting demographic data on applicants is to test whether the selection process screens out protected groups at disproportionate rates. The standard tool is the four-fifths rule, sometimes called the 80% rule, from the Uniform Guidelines on Employee Selection Procedures. Divide the selection rate of a protected group by the selection rate of the group with the highest rate. If the result falls below 80%, there is statistical evidence of adverse impact.8EEOC. Questions and Answers to Clarify and Provide a Common Interpretation of the Uniform Guidelines on Employee Selection Procedures
If 40% of white applicants receive offers and 25% of Black applicants do, the ratio is 25/40, or 62.5%. That flags potential adverse impact. It is a screening device, not a legal verdict. OFCCP may also use more sophisticated statistical tests, including two-standard-deviation analysis, particularly when sample sizes are small.
Accurate applicant tracking makes the analysis possible. If records are incomplete or the applicant definition is applied inconsistently, the calculation becomes unreliable, and the contractor loses the chance to catch and correct disparities before OFCCP does. That risk is the real reason the four-part test, and the records behind it, still matter under the programs that remain in force.