The information commissioner’s office (ICO) has a checklist to follow to meet this obligation.
You can give a candidate access to the personal data and documents you have by generating a secure link for them. This link will allow them to opt out of communication and any further data processing: this opt out will be reflected within the CRM when you visit a candidate profile, and email/campaigns are all disabled for an opted out candidate.