Draft a privacy notice for an employee under the GDPR

Key points

  • Employers must provide employees with information about how they process their personal data through a privacy notice (also known as information notices or fair processing notices).
  • Employers should ensure that all the information required under the General Data Protection Regulation (GDPR) is contained in the privacy notice and must provide the information at the point of data collection.
  • The information to be provided includes the legal bases on which the employer is relying to process the personal data. If it is relying on its legitimate interests as a legal basis, it must identify those interests.
  • The privacy notice must also set out information about how long data will be retained.

XpertHR resources