Handling employee data under new data protection laws

By Lancashire Business View

13 Mar 2018

By David Edwards, senior associate, regulatory and compliance, Harrison Drury.

From the 25 May 2018, The General Data Protection Regulation and what will become the new Data Protection Act 2018, will form the UK’s new data protection framework.

Where consent is relied upon as a ground for the lawful processing of personal data, data controllers should be able to demonstrate that consent was given by the data subject, ie the employee.

Employers seeking to rely on consent as the lawful justification for processing confidential personal employee data must satisfy the following: Consent must be specific and informed Employees must have the right to withdraw consent Consent must be freely given Consent must be unambiguous and take the form of an affirmative action or statement For certain types of personal data processing, the consent must be explicit Privacy notices for employees

The GDPR requires employers to notify its data subjects about their personal data handling practices through a privacy notice. Employers should have a proactive approach to data processing.

Privacy notices are designed to sufficiently inform data subjects about how their employer collects, uses, stores, transfers and secures personal data.

Privacy notices can also seek to act as an education piece for employees. They advise employees about what will be done with their personal data and why – something which hasn’t always been a concept thoroughly considered by some employers.

Just like policies and procedures, privacy notices must be fit for purpose. Vague notices are of little assistance, and in actual fact, could encourage a sense of concern amongst employees if they are not sure as to what is being done with their personal data.

Whilst operating in the capacity of an employer, consider – why do we do what we do with personal data? Can you sufficiently justify why? Best practice approaches

Employers should begin to give sufficient consideration to how they obtain their employee’s consent, taking into account the following; Treat the consent to process personal data separate to other permissions The employer seeks separate consent for each personal data processing activity The employee consents freely Employees must know of their right to withdraw consent The organisation satisfies other information notice requirements The employer can demonstrate that it obtained valid consent

Whilst the government has advised that the new Data Protection Act 2018 will set out a number of exemptions from GDPR, employers should now be getting themselves familiar with the relevant provisions of the GDPR. In any event, employers should be well underway in terms of identifying what steps need to be taken with a view to becoming compliant with the GDPR.

Latest news

1

Final call for investors: Rossendale community solar project must hit target by November Gary McEwan managing director of Interfloor

Final call for investors: Rossendale community solar project must hit target by November

10 Sep 2025

2

Lancashire Combined County Authority unveil plan to Get Lancashire Working Lancashire Combined Authority

Lancashire Combined County Authority unveil plan to Get Lancashire Working

10 Sep 2025

3

Lockheed Martin Skunk Works and BAE Systems’ FalconWorks announce strategic collaboration Collaboration between BAE Systems FalconWorks and Lockheed Martin Skunk Works

Lockheed Martin Skunk Works and BAE Systems’ FalconWorks announce strategic collaboration

09 Sep 2025

4

High street retailers urged to ‘take advantage’ of new funded support programme Brian Moore, Lee Johnson, Anne Williamson and Andrew Leeming

High street retailers urged to ‘take advantage’ of new funded support programme

08 Sep 2025

5

Beaverbrooks invest in the high street in difficult conditions Mark Adlestone And Anna Blackburn Beaverbrooks

Beaverbrooks invest in the high street in difficult conditions

08 Sep 2025

Background image for hub sign up block

LBV Hub

Leverage Lancashire Business View platforms

Post your news
Post your events
Post your offers
Build your network
Improve your SEO
Gain coverage in the magazine
Sign-up
Events
Sub36 Networking - Follow the signs
Sub36 Deaf Village Social1200
Networking
17 Sep 2025

Sub36 Networking - Follow the signs

The Deaf Village, Blackburn, BB2 5EN

10:00 - 12:00

LBV124 September/October Launch Event
MBP Arc Cinema Preston Opening 205
Networking
18 Sep 2025

LBV124 September/October Launch Event

The Arc Cinema, Preston, PR1 2BL

08:30 - 10:30

CMI Level 5 Management and Leadership Course
UCLanAerialCampus.jpg.jpg
LBV Hub Seminars
21 Feb 2025 - 21 Feb 2026

CMI Level 5 Management and Leadership Course

Preston Campus, Preston , PR1 2HE

09:00 - 17:00

CMI Level 5 Project Management Course
UCLanAerialCampus.jpg.jpg
LBV Hub Seminars
21 Feb 2025 - 21 Feb 2026

CMI Level 5 Project Management Course

Preston Campus, Preston, PR1 2HE

08:00 - 17:00

Longridge Soap Box Derby
Screenshot 2025-06-10 090035.png.png
LBV Hub Fundraisers
14 Sep 2025 - 14 Sep 2025

Longridge Soap Box Derby

Berry Lane, Longridge, PR3 3WH

10:00 - 16:30

Preston Tech Connection - The Ultimate Tech Quiz!
Preston Tech Connection Sept 25.png.png
LBV Hub Networking
16 Sep 2025 - 16 Sep 2025

Preston Tech Connection - The Ultimate Tech Quiz!

Society1, Coworking Space, Preston, PR1 3LT

18:00 - 19:00

The Business Network Central & East Lancashire
LBV Hub Networking
17 Sep 2025 - 17 Sep 2025

The Business Network Central & East Lancashire

Stanley House, Blackburn, BB2 7NP

11:30 - 14:15

Cumbria Business Expo 2025
https---cdn.evbuc.com-images-880461633-4862066883-1-original.20241022-110415.jpeg.jpg
LBV Hub Exhibitions
19 Sep 2025 - 19 Sep 2025

Cumbria Business Expo 2025

Carlisle Racecourse, Carlisle, CA2 4TS

09:00 - 15:00

Preston Freelancer Meet-Up: September
Sept Freelancer (1).png.png
LBV Hub Networking
23 Sep 2025 - 23 Sep 2025

Preston Freelancer Meet-Up: September

Society1, Coworking Space, Preston, PR1 3LT

10:00 - 11:30

Your Business, Your Region: Making sense of devolution and Local Government Reorganisation
Chorley Council breakfast event new
LBV Hub Networking
23 Sep 2025 - 23 Sep 2025

Your Business, Your Region: Making sense of devolution and Local Government Reorganisation

Worden Hall, Leyland, PR25 3DH

08:00 - 11:00

Speed Networking with BNI
2.png.png
LBV Hub Networking
24 Sep 2025 - 24 Sep 2025

Speed Networking with BNI

Chorley Football Club, Chorley, PR7 3DU

16:00 - 19:00

The Marketing Meetup IRL: Lancashire - September
TMM Lancashire
LBV Hub Networking
25 Sep 2025 - 25 Sep 2025

The Marketing Meetup IRL: Lancashire - September

Chorley, PR7 2SL

18:00 - 20:00

Advertise with us

Reaching 50,000 members, our print, digital and event platforms offer a fantastic way to raise your business profile and help you grow.

Find out more LBV 123 Online Graphic
Subscribe now

Weekly news bulletin