Handling employee data under new data protection laws

By Lancashire Business View

13 Mar 2018

By David Edwards, senior associate, regulatory and compliance, Harrison Drury.

From the 25 May 2018, The General Data Protection Regulation and what will become the new Data Protection Act 2018, will form the UK’s new data protection framework.

Where consent is relied upon as a ground for the lawful processing of personal data, data controllers should be able to demonstrate that consent was given by the data subject, ie the employee.

Employers seeking to rely on consent as the lawful justification for processing confidential personal employee data must satisfy the following: Consent must be specific and informed Employees must have the right to withdraw consent Consent must be freely given Consent must be unambiguous and take the form of an affirmative action or statement For certain types of personal data processing, the consent must be explicit Privacy notices for employees

The GDPR requires employers to notify its data subjects about their personal data handling practices through a privacy notice. Employers should have a proactive approach to data processing.

Privacy notices are designed to sufficiently inform data subjects about how their employer collects, uses, stores, transfers and secures personal data.

Privacy notices can also seek to act as an education piece for employees. They advise employees about what will be done with their personal data and why – something which hasn’t always been a concept thoroughly considered by some employers.

Just like policies and procedures, privacy notices must be fit for purpose. Vague notices are of little assistance, and in actual fact, could encourage a sense of concern amongst employees if they are not sure as to what is being done with their personal data.

Whilst operating in the capacity of an employer, consider – why do we do what we do with personal data? Can you sufficiently justify why? Best practice approaches

Employers should begin to give sufficient consideration to how they obtain their employee’s consent, taking into account the following; Treat the consent to process personal data separate to other permissions The employer seeks separate consent for each personal data processing activity The employee consents freely Employees must know of their right to withdraw consent The organisation satisfies other information notice requirements The employer can demonstrate that it obtained valid consent

Whilst the government has advised that the new Data Protection Act 2018 will set out a number of exemptions from GDPR, employers should now be getting themselves familiar with the relevant provisions of the GDPR. In any event, employers should be well underway in terms of identifying what steps need to be taken with a view to becoming compliant with the GDPR.

Latest news

1

East Lancashire Learning Group named UK digital transformation leader in CIO 100 Awards Andrew Dewhurst with the award win

East Lancashire Learning Group named UK digital transformation leader in CIO 100 Awards

09 Oct 2025

2

PHX Training appoints new business leader in Blackpool Jason Davenport PHX Training

PHX Training appoints new business leader in Blackpool

09 Oct 2025

3

Velocity seals Airbus extension worth up to $54m Velocity Composites Has Announced Its Entry Into The Us Market

Velocity seals Airbus extension worth up to $54m

08 Oct 2025

4

First speakers confirmed for Lancashire Business Day Dave Walker with Richard Slater at Lancashire Business Day

First speakers confirmed for Lancashire Business Day

08 Oct 2025

5

Hemmings steps down as PNE chairman as hunt begins for new investors Craig Hemmings

Hemmings steps down as PNE chairman as hunt begins for new investors

08 Oct 2025

Background image for hub sign up block

LBV Hub

Leverage Lancashire Business View platforms

Post your news
Post your events
Post your offers
Build your network
Improve your SEO
Gain coverage in the magazine
Sign-up
Events
CMI Level 5 Management and Leadership Course
UCLanAerialCampus.jpg.jpg
LBV Hub Seminars
21 Feb 2025 - 21 Feb 2026

CMI Level 5 Management and Leadership Course

Preston Campus, Preston , PR1 2HE

09:00 - 17:00

CMI Level 5 Project Management Course
UCLanAerialCampus.jpg.jpg
LBV Hub Seminars
21 Feb 2025 - 21 Feb 2026

CMI Level 5 Project Management Course

Preston Campus, Preston, PR1 2HE

08:00 - 17:00

Help to grow management course
Help to grow - barriers to growth.png.png
LBV Hub Seminars
26 Sep 2025 - 16 Dec 2025

Help to grow management course

Preston Campus , Preston , PR1 2HE

09:00 - 15:00

Empowering Franchise Growth in the North West
Empowering Franchise Growth in the North West event
LBV Hub Seminars
09 Oct 2025 - 09 Oct 2025

Empowering Franchise Growth in the North West

Forbes Solicitors, Sceptre Way, Walton Summit Centre, PR5 6AW, PR6 6AW

08:00 - 10:00

Empowering franchise growth in the North West
TFA Event - Empowering Franchise Growth.jpg.jpg
LBV Hub Seminars
09 Oct 2025 - 09 Oct 2025

Empowering franchise growth in the North West

Forbes Solicitors Sceptre Way Walton Summit Centre , Preston, PR5 6AW

08:00 - 10:00

Advantage: AI – A Workshop for Business Leaders – Oct 10th
Ai 10.10.png.png
LBV Hub Seminars
10 Oct 2025 - 10 Oct 2025

Advantage: AI – A Workshop for Business Leaders – Oct 10th

Door4 Office, Burnley Wharf, Burnley, BB11 1JG

09:00 - 12:00

The New Employee Rights Landscape: Day One Compliance Essentials
EventBrite NORi - 15th Oct 2025 Webinar.png.png
LBV Hub Webinar
15 Oct 2025 - 15 Oct 2025

The New Employee Rights Landscape: Day One Compliance Essentials

Microsoft Teams, Microsoft Teams, PR253XH

13:30 - 15:00

Unlocking major project opportunities in the North West
Lancs-cham-logo.jpg.jpg
LBV Hub Seminars
15 Oct 2025 - 15 Oct 2025

Unlocking major project opportunities in the North West

Strathmore Hotel, Morecambe, LA4 5AP

08:00 - 10:00

The Autumn Re set - pour me a wine
LBV Advert_Autumn Reset 1200 x 630px.png.png
LBV Hub Networking
16 Oct 2025 - 16 Oct 2025

The Autumn Re set - pour me a wine

The Artistry House , Preston , PR1 3JJ

17:30 - 19:30

The Business Network Central & East Lancashire
LBV Header (26).png.png
LBV Hub Networking
16 Oct 2025 - 16 Oct 2025

The Business Network Central & East Lancashire

Stanley House, Blackburn, BB2 7NP

11:30 - 14:15

October Freelancer Meet-Up
LBV Hub Networking
16 Oct 2025 - 16 Oct 2025

October Freelancer Meet-Up

Society1, Coworking Space, Preston, PR1 3LT

10:00 - 11:30

Women scaling up Blackpool Fylde and Wyre
LBV Hub Seminars
22 Oct 2025 - 09 Jan 2026

Women scaling up Blackpool Fylde and Wyre

The Small Business Academy, Blackpool, FY4 5JX

09:30 - 15:30

Advertise with us

Reaching 50,000 members, our print, digital and event platforms offer a fantastic way to raise your business profile and help you grow.

Find out more LBV124 Online Graphic
Subscribe now

Weekly news bulletin