In WM Morrison Supermarkets plc v Various claimants, the Court of Appeal held that the employer is vicariously liable for the criminal actions of an employee who disclosed the personal data of his fellow employees online.
The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 place strict duties on employers in relation to the processing of personal data.
A model form to conduct a data protection impact assessment for potentially high-risk data processing. The form, which complies with the General Data Protection Regulation (GDPR), uses the example of an impact assessment when an employer is proposing to introduce CCTV monitoring in a particular location.
A model privacy notice to give contractors information about how their personal data will be used, in compliance with the General Data Protection Regulation (GDPR).
A model privacy notice to give workers information about how their personal data will be used, in compliance with the General Data Protection Regulation (GDPR).
A model form to allow an individual to request the rectification of incorrect or incomplete data about them. The form complies with the General Data Protection Regulation (GDPR).
A model letter to inform an individual that incorrect or incomplete data about them has been rectified, in compliance with the General Data Protection Regulation (GDPR).
A model letter for your organisation to ask for more information from an individual who has requested the rectification of incorrect or incomplete data about them.