Data Protection in the Workplace: Employer Guidance

This guidance document is specifically aimed at assisting employers as data controllers regarding their data processing obligations and duties when processing the personal data of their employees, former employees and prospective employees. Employers collect and process significant amounts of personal data on prospective and current employees. In some instances, employers may also continue to process personal data of former employees. This personal data can range from basic information such as names, addresses and PPSNs, but can also include information on occupational health, sick leave, performance reviews or disciplinary actions. Therefore, employers, as data controllers must be mindful of their responsibilities, obligations and duties under the GDPR and the Data Protection Act 2018.

Full Guidance Note here (PDF).