GDPR: New model documents on consent, rectification and erasure

XpertHR has added a new form to seek consent to process personal data for a specific purpose, where no other legal basis for the processing applies under the General Data Protection Regulation (GDPR). We also provide new forms and letters for requests for rectification and erasure of personal data under the GDPR.

Further resources

What other model documents have been updated for the GDPR?

View all our model GDPR-compliant data protection documents

Employers should not generally rely on consent as the basis for processing personal data under the GDPR because the imbalance in the employment relationship means that consent is rarely freely given. However, consent may be appropriate where there are no adverse consequences in a refusal to consent.

Examples include requests to retain an unsuccessful job applicants' details or for an employee to appear in a recruitment video for its website.

Under the GDPR, there are specific mechanisms to allow individuals to have:

  • incorrect or incomplete personal data rectified; and
  • personal data erased in certain circumstances, for example where the employer no longer needs to process the data.

Rectification of personal data

Erasure of personal data