Data protection

New and updated

• Type:

  Letters and forms

  Letter informing individual that personal data has been erased

  A model letter to inform an individual that data about them has been deleted, in compliance with the General Data Protection Regulation (GDPR).

• Type:

  Letters and forms

  Form for individual to make subject access request

  Updated to take account of verbal subject access requests, which ICO guidance states are valid.

• Type:

  Letters and forms

  Letter responding to subject access request asking for more information

  Updated to take account of verbal subject access requests, which ICO guidance states are valid.

• Type:

  Letters and forms

  Letter extending time to respond to subject access request

  Updated to take account of verbal subject access requests, which ICO guidance states are valid.

• Type:

  FAQs

  What rights of access do employees have to job references?

• Type:

  FAQs

  Where an individual's employment offer is withdrawn due to an unsatisfactory reference do they have any right to see the reference?

• Type:

  FAQs

  Where an employer has been asked by the police to provide information on an employee, will data protection laws prevent it from complying with the request?

• Type:

  Letters and forms

  Form for employee to provide explicit consent to disclose special category personal data in reference

  Updated to take account of the General Data Protection Regulation, in force from 25 May 2018.

• Type:

  Letters and forms

  Letter to employee explaining explicit consent is required for special category personal data to be disclosed in reference

  Updated to take account of the General Data Protection Regulation, in force from 25 May 2018.

• Type:

  Quick reference

  Special categories of personal data

  A table listing the information classified as special categories of personal data under the General Data Protection Regulation.