Draft a privacy notice for a worker under the UK GDPR
- Employers must provide a privacy notice to all individuals whose personal data they process, including workers such as casual, agency and seasonal staff.
- Employers should ensure that all the information required under the UK General Data Protection Regulation (UK GDPR) is contained in the privacy notice and must provide the information at the point of data collection.
- The information to be provided includes the legal bases on which the employer is relying to process the personal data. If it is relying on its legitimate interests as a legal basis, it must identify those interests.
- The privacy notice must also set out information about how long data will be retained.