General Data Protection Regulation ((EU) 2016/679) (‘GDPR’)
GDPR is inevitably going to shake up the employment aspect of your business. The new rules which come into effect on 25 May 2018 will impose stricter requirements on the employer and how they request, handle and record personal data from their employees.
You should review your standard employment documents from employment contracts, staff handbooks, privacy policies and your data registers to comply with the new rules. Whilst these documents will require updating, employers may also need to ensure they have a privacy notice in place for their employees. This is a document which details the personal data which your business collects on its employees, the lawful basis on which the processing of this data is carried out and how long the data is retained. An example of a lawful basis on which data can be processed is in the course of performance of a contract to which the employee whose data is being processed is party to.
For advice on GDPR implications on your capacity as an employer, please contact our Head of Company Commercial David Anderson.