With less than 100 days to go until the General Data Protection Regulation (GDPR) takes effect, employers have been reminded to take stock of their data collection policies and consider how data security is approached by their employees.
Revised to reflect the requirements of the new data protection regime under the GDPR, including the importance of identifying the legal basis for retaining personal data and the rules on retaining special categories of data.
In López Ribalda and others v Spain, the European Court of Human Rights held that Spanish shop workers' right to privacy was violated when a supermarket installed hidden cameras without their knowledge to monitor employee thefts.
Practical guidance on identifying the legal bases for processing employee data under the General Data Protection Regulation (GDPR), including recognising the most relevant grounds for employers: performance of the employment contract, compliance with a legal obligation and the employer's legitimate interests.
HR and legal information and guidance relating to data protection.
We provide a list of model policies and documents in which the sample wording has been updated to comply with the General Data Protection Regulation (GDPR), which is in force from 25 May 2018.