Data protection

New and updated

• Type:

  Letters and forms

  Register of subject access requests

  A model register to keep a record of subject access requests from employees and other individuals. The letter complies with the General Data Protection Regulation (GDPR).

• Type:

  Contract clauses

  Confidentiality agreement

  A model agreement to prohibit existing staff from disclosing the organisation's confidential information. The agreement complies with the General Data Protection Regulation (GDPR).

• Type:

  Letters and forms

  Register of HR-related personal data

  A model personal data register to keep a record of a data controller's processing activities in relation to HR-related personal data. The register is compliant with the General Data Protection Regulation (GDPR).

• Type:

  FAQs

  Can employers carry out criminal records checks under the UK GDPR?

• Type:

  FAQs

  What are an employer's obligations under the UK GDPR if it contracts with a third-party provider to process its employee data?

• Type:

  FAQs

  What are an employer's obligations under the UK GDPR in relation to emails containing personal data?

• Type:

  FAQs

  Does the UK GDPR apply to small employers?

• Type:

  FAQs

  Does the UK GDPR affect for how long employers can keep data relating to former employees?

• Type:

  FAQs

  What are an employer's obligations under the UK GDPR in relation to the processing of special categories of personal data?

• Type:

  FAQs

  Which employers are required to appoint a Data Protection Officer under the UK GDPR?