Data protection

New and updated

• Type:

  Letters and forms

  Form for employee to provide explicit consent to disclose special category personal data in reference

  Updated to take account of the General Data Protection Regulation, in force from 25 May 2018.

• Type:

  Letters and forms

  Letter to employee explaining explicit consent is required for special category personal data to be disclosed in reference

  Updated to take account of the General Data Protection Regulation, in force from 25 May 2018.

• Type:

  Quick reference

  Special categories of personal data

  A table listing the information classified as special categories of personal data under the General Data Protection Regulation.

• Type:

  FAQs

  In a TUPE situation is the transferor required to obtain its employees' consent before passing on information about them to the transferee?

• Type:

  FAQs

  Can an employer use AI to make shortlisting decisions?

• Type:

  FAQs

  Do job applicants have the right to see notes made on them at interview?

• Type:

  FAQs

  If an employee asks for a copy of their "personnel file" is the employer obliged to supply all the information held on the employee?

• Type:

  FAQs

  Is an employer able to record a meeting with an employee to ensure that it has an accurate record of the meeting?

• Type:

  Tasks

  Respond to a subject access request from an employee under the GDPR

• Type:

  Policies and procedures

  Use of personal devices for work/bringing your own device to work policy

  Updated to set out: the implications of the General Data Protection Regulation; the strict limits on what data should be held on personal devices; to whom data breaches should be reported; and how personal data will be handled when monitoring use of personal devices for work.