Practical guidance on starting to prepare for the General Data Protection Regulation (GDPR), including understanding the main changes that will impact on HR; obtaining organisational buy-in for GDPR compliance; assembling a GDPR compliance team; and conducting a risk assessment of employee data processing practices.
Additional information on the law on data protection for local authority employers, including monitoring equality. To be read in conjunction with the general information on the law on data protection.
Practical guidance on obtaining and using a medical report on an employee for the purpose of managing absence, complying with the duty to make reasonable adjustments for disabled employees, or in the recruitment process, including how to comply with the Access to Medical Reports Act 1988 and the Data Protection Act 1998.
A table listing the information classified as sensitive personal data under the Data Protection Act 1998.
HR and legal information and guidance relating to sensitive personal data.