Data protection

New and updated

• Type:

  Quick reference

  Personal data processing fees (for fees payable on or after 25 May 2018)

  A table listing the annual fees organisations must pay to the Information Commissioner's Office.

• Type:

  FAQs

  In a TUPE situation is the transferor required to obtain its employees' consent before passing on information about them to the transferee?

• Type:

  FAQs

  Can an employer use AI to make shortlisting decisions?

• Type:

  FAQs

  Do job applicants have the right to see notes made on them at interview?

• Type:

  FAQs

  If an employee asks for a copy of their "personnel file" is the employer obliged to supply all the information held on the employee?

• Type:

  FAQs

  Is an employer able to record a meeting with an employee to ensure that it has an accurate record of the meeting?

• Type:

  Tasks

  Respond to a subject access request from an employee under the GDPR

• Type:

  Policies and procedures

  Use of personal devices for work/bringing your own device to work policy

  Updated to set out: the implications of the General Data Protection Regulation; the strict limits on what data should be held on personal devices; to whom data breaches should be reported; and how personal data will be handled when monitoring use of personal devices for work.

• Type:

  FAQs

  Can an employer hold an unsuccessful candidate's CV on file in case a further job vacancy arises?

• Type:

  FAQs

  For how long should an employer keep an employee or ex-employee's personnel files?