The recruiter might not be from the same company and creating/sharing these kind of databases with everyone and their mother seems like a hell from the data protection/privacy standpoint.

Feels like an edge case that it's not worth fixing. How often is this going to happen? Do you really want to collect tons of personal data from your candidates before they even show to an interview? Is it worth it to keep personal data of your ex-employees just because of this and is it even legal? (might not be in EU)