GDPR: Model right to work in the UK documents updated

We have revised our model right to work in the UK documents to comply with the General Data Protection Regulation (GDPR), which is in force from 25 May 2018.

What other model documents have been updated for the GDPR?

We provide a list of model policies and documents in which the sample wording has been updated to comply with the GDPR.

Look out in the coming weeks for more updates to our model policies and documents to make them GDPR-compliant.

The introduction of the GDPR means that employers should review their documentation to ensure that: data protection and privacy considerations are embedded; only the minimum amount of personal data is collected and processed for a specific purpose; there is a legal basis for processing personal data; and individuals whose personal data is being processed are provided with privacy notices.

Employers are required to ensure that their employees have the right to work in the UK. Organisations that sponsor foreign nationals under tier 2 of the points-based system need to hold certain documents to demonstrate their compliance with immigration requirements. Some of the documents that employers need to keep are likely to include data about employees that potentially reveals their racial and ethnic origin. This type of information falls within the special categories of personal data under the GDPR and is subject to more stringent rules than other personal data.

Therefore, we have updated the following immigration-related documents to take account of the GDPR:

We have updated the commentary in the following immigration-related documents to highlight the impact of the GDPR: