Updated to reflect the provisions of the Data (Use and Access) Act 2025 in force from 5 February 2026. In particular, the relaxation of rules on automated decision-making.
Practical guidance on identifying the legal bases for processing employee data under the General Data Protection Regulation (GDPR), including recognising the most relevant grounds for employers: performance of the employment contract, compliance with a legal obligation and the employer's legitimate interests.
About this category
Practical step-by-step advice on how to manage workplace situations relating to personal data.