Handling employee data under new data protection laws

By Lancashire Business View

13 Mar 2018

By David Edwards, senior associate, regulatory and compliance, Harrison Drury.

From the 25 May 2018, The General Data Protection Regulation and what will become the new Data Protection Act 2018, will form the UK’s new data protection framework.

Where consent is relied upon as a ground for the lawful processing of personal data, data controllers should be able to demonstrate that consent was given by the data subject, ie the employee.

Employers seeking to rely on consent as the lawful justification for processing confidential personal employee data must satisfy the following: Consent must be specific and informed Employees must have the right to withdraw consent Consent must be freely given Consent must be unambiguous and take the form of an affirmative action or statement For certain types of personal data processing, the consent must be explicit Privacy notices for employees

The GDPR requires employers to notify its data subjects about their personal data handling practices through a privacy notice. Employers should have a proactive approach to data processing.

Privacy notices are designed to sufficiently inform data subjects about how their employer collects, uses, stores, transfers and secures personal data.

Privacy notices can also seek to act as an education piece for employees. They advise employees about what will be done with their personal data and why – something which hasn’t always been a concept thoroughly considered by some employers.

Just like policies and procedures, privacy notices must be fit for purpose. Vague notices are of little assistance, and in actual fact, could encourage a sense of concern amongst employees if they are not sure as to what is being done with their personal data.

Whilst operating in the capacity of an employer, consider – why do we do what we do with personal data? Can you sufficiently justify why? Best practice approaches

Employers should begin to give sufficient consideration to how they obtain their employee’s consent, taking into account the following; Treat the consent to process personal data separate to other permissions The employer seeks separate consent for each personal data processing activity The employee consents freely Employees must know of their right to withdraw consent The organisation satisfies other information notice requirements The employer can demonstrate that it obtained valid consent

Whilst the government has advised that the new Data Protection Act 2018 will set out a number of exemptions from GDPR, employers should now be getting themselves familiar with the relevant provisions of the GDPR. In any event, employers should be well underway in terms of identifying what steps need to be taken with a view to becoming compliant with the GDPR.

Latest news

1

CMAC Group appoints Matthew Ratcliffe as chief operating officer Matthew Ratcliffe CMAC

CMAC Group appoints Matthew Ratcliffe as chief operating officer

03 Apr 2025

2

For sale signs at The Villa Villa Wrea Green has been brought to market (Image credit: The Villa Wrea Green)

For sale signs at The Villa

02 Apr 2025

3

Montane group expands with new Lancashire hub Anthony Rae Scott Murcott And Adam Lee

Montane group expands with new Lancashire hub

02 Apr 2025

4

Trio of wins for Lancaster brand and digital consultancy Tom Grattan MD and Daniel Wallace

Trio of wins for Lancaster brand and digital consultancy

02 Apr 2025

5

College excellence highlighted in Ofsted report Fazal Dad

College excellence highlighted in Ofsted report

02 Apr 2025

Pc Prestonmacan Gif980x120 March
Background image for hub sign up block

LBV Hub

Leverage Lancashire Business View platforms

Post your news
Post your events
Post your offers
Build your network
Improve your SEO
Gain coverage in the magazine
Sign-up
Events
Lancashire Net Zero Carbon Conference
Net Zero Carbon Social 1200px
Networking
18 Jun 2025

Lancashire Net Zero Carbon Conference

Crow Wood Hotel & Spa Resort, Burnley, BB12 0RT

08:30 - 13:00

CMI Level 5 Management and Leadership Course
UCLanAerialCampus.jpg.jpg
LBV Hub Seminars
21 Feb 2025 - 21 Feb 2026

CMI Level 5 Management and Leadership Course

Preston Campus, Preston , PR1 2HE

09:00 - 17:00

CMI Level 5 Project Management Course
UCLanAerialCampus.jpg.jpg
LBV Hub Seminars
21 Feb 2025 - 21 Feb 2026

CMI Level 5 Project Management Course

Preston Campus, Preston, PR1 2HE

08:00 - 17:00

RISE - The Academy for Female Leaders and Managers
WENDY BOWERS RISE Illustrstion copy.jpg.jpg
LBV Hub Seminars
02 Apr 2025 - 08 Oct 2025

RISE - The Academy for Female Leaders and Managers

East Lancashire Chamber of Commerce, Clayton le Moors, BB5 5JR

09:00 - 15:30

WHN Charity Quiz Night
Evenbrite Quiz 2025.png.png
LBV Hub Fundraisers
03 Apr 2025 - 03 Apr 2025

WHN Charity Quiz Night

The Stables Country Club, Bury , BL9 1PU

18:00 - 22:00

Chamber Breakfast Networking – April
Chamber logo - new-02.png.png
LBV Hub Networking
03 Apr 2025 - 03 Apr 2025

Chamber Breakfast Networking – April

The Dukes Theatre, Lancaster, LA1 1QE

08:00 - 10:00

Lancashire Business Expo 2025
https---cdn.evbuc.com-images-880395853-4862066883-1-original.20241022-091152-2.jpeg.jpg
LBV Hub Exhibitions
04 Apr 2025 - 04 Apr 2025

Lancashire Business Expo 2025

Sir Tom Finney Sports Centre, Preston, PR1 2HE

09:00 - 15:00

The Business Network Central & East Lancashire
LBV Hub Networking
24 Apr 2025 - 24 Apr 2025

The Business Network Central & East Lancashire

Stanley House, Blackburn, BB2 7NP

11:30 - 14:15

People Power: Exclusive Event Series
Stay ahead in 2025.jpg.jpg
LBV Hub Seminars
29 Apr 2025 - 29 Apr 2025

People Power: Exclusive Event Series

People's History Museum, Manchester, M3 3ER

17:00 - 21:00

Planning for the future + navigating Inheritance Tax changes
Planning for the future + navigating Inheritance Tax changes for website.png.png
LBV Hub Seminars
01 May 2025 - 01 May 2025

Planning for the future + navigating Inheritance Tax changes

Stanley House Hotel, Mellor, Blackburn, BB2 7NP, Blackburn, BB2 7NP

08:00 - 10:30

A night at the races
1.png.png
LBV Hub Dinners / Balls
02 May 2025 - 02 May 2025

A night at the races

Morecambe FC, Morecambe, LA4 4TB

19:00 - 23:59

Amber River True Bearing quarterly investment seminar
LBV Hub Seminars
22 May 2025 - 22 May 2025

Amber River True Bearing quarterly investment seminar

Cottons Hotel & Spa , Knutsford, WA16 0SU

16:00 - 18:00

Advertise with us

Reaching 50,000 members, our print, digital and event platforms offer a fantastic way to raise your business profile and help you grow.

Find out more Lbv121 Online Graphic
Subscribe now

Weekly news bulletin