Handling employee data under new data protection laws

By Lancashire Business View

13 Mar 2018

By David Edwards, senior associate, regulatory and compliance, Harrison Drury.

From the 25 May 2018, The General Data Protection Regulation and what will become the new Data Protection Act 2018, will form the UK’s new data protection framework.

Where consent is relied upon as a ground for the lawful processing of personal data, data controllers should be able to demonstrate that consent was given by the data subject, ie the employee.

Employers seeking to rely on consent as the lawful justification for processing confidential personal employee data must satisfy the following: Consent must be specific and informed Employees must have the right to withdraw consent Consent must be freely given Consent must be unambiguous and take the form of an affirmative action or statement For certain types of personal data processing, the consent must be explicit Privacy notices for employees

The GDPR requires employers to notify its data subjects about their personal data handling practices through a privacy notice. Employers should have a proactive approach to data processing.

Privacy notices are designed to sufficiently inform data subjects about how their employer collects, uses, stores, transfers and secures personal data.

Privacy notices can also seek to act as an education piece for employees. They advise employees about what will be done with their personal data and why – something which hasn’t always been a concept thoroughly considered by some employers.

Just like policies and procedures, privacy notices must be fit for purpose. Vague notices are of little assistance, and in actual fact, could encourage a sense of concern amongst employees if they are not sure as to what is being done with their personal data.

Whilst operating in the capacity of an employer, consider – why do we do what we do with personal data? Can you sufficiently justify why? Best practice approaches

Employers should begin to give sufficient consideration to how they obtain their employee’s consent, taking into account the following; Treat the consent to process personal data separate to other permissions The employer seeks separate consent for each personal data processing activity The employee consents freely Employees must know of their right to withdraw consent The organisation satisfies other information notice requirements The employer can demonstrate that it obtained valid consent

Whilst the government has advised that the new Data Protection Act 2018 will set out a number of exemptions from GDPR, employers should now be getting themselves familiar with the relevant provisions of the GDPR. In any event, employers should be well underway in terms of identifying what steps need to be taken with a view to becoming compliant with the GDPR.

Latest news

1

Morecambe shortlisted in National Visa Awards celebrating the UK’s thriving towns David Waddington and John O'Neill

Morecambe shortlisted in National Visa Awards celebrating the UK’s thriving towns

04 Jul 2025

2

County council sets out 'areas of focus for 2025-26 in document Coun Stephen Atkinson

County council sets out 'areas of focus for 2025-26 in document

04 Jul 2025

3

Warden Construction completes project to help Preston school double pupil numbers Warden Construction completes project to help Preston school double pupil numbers

Warden Construction completes project to help Preston school double pupil numbers

04 Jul 2025

4

Grant Thornton advises RJ Power Networks on sale to Ipsum Jamie Roberts

Grant Thornton advises RJ Power Networks on sale to Ipsum

04 Jul 2025

5

College principal resigns Karen Buchanan

College principal resigns

04 Jul 2025

Background image for hub sign up block

LBV Hub

Leverage Lancashire Business View platforms

Post your news
Post your events
Post your offers
Build your network
Improve your SEO
Gain coverage in the magazine
Sign-up
Events
LBV123 July/August Launch Event
Lancashire Business View magazine launch
Networking
16 Jul 2025

LBV123 July/August Launch Event

Burnley

08:30 - 10:30

Lancashire Built Environment Conference 2025
BEC 315 X 315 Px
Networking
25 Sep 2025

Lancashire Built Environment Conference 2025

Blackpool Football Club, Blackpool, FY1 6HX

08:30 - 13:00

CMI Level 5 Management and Leadership Course
UCLanAerialCampus.jpg.jpg
LBV Hub Seminars
21 Feb 2025 - 21 Feb 2026

CMI Level 5 Management and Leadership Course

Preston Campus, Preston , PR1 2HE

09:00 - 17:00

CMI Level 5 Project Management Course
UCLanAerialCampus.jpg.jpg
LBV Hub Seminars
21 Feb 2025 - 21 Feb 2026

CMI Level 5 Project Management Course

Preston Campus, Preston, PR1 2HE

08:00 - 17:00

Tri-Site Survey Equipment Showcase
unnamed (2).jpg.jpg
LBV Hub Seminars
09 Jul 2025 - 09 Jul 2025

Tri-Site Survey Equipment Showcase

Crow Wood Hotel, Burnley, BB12 0RT

09:30 - 16:00

Blackburn Cathedral hosts Champagne and Diamonds Event with Ainsworth Jewellers
Champagne-Jewellery 10 07 25_page-0001.jpg.jpg
LBV Hub Awards
10 Jul 2025 - 10 Jul 2025

Blackburn Cathedral hosts Champagne and Diamonds Event with Ainsworth Jewellers

Blackburn Cathedral, Blackburn, BB1 5AA

18:00 - 20:30

Choose Chorley for Business - Talent Reimagined Business Breakfast
talentreimaginedbb.png.png
LBV Hub Seminars
10 Jul 2025 - 10 Jul 2025

Choose Chorley for Business - Talent Reimagined Business Breakfast

Strawberry Fields Digital Hub, Chorley, PR71PS

08:00 - 10:30

Shaping Preston's future by remembering its past
1750160034867.png.png
LBV Hub Networking
16 Jul 2025 - 16 Jul 2025

Shaping Preston's future by remembering its past

Society1, Coworking Space, Preston, PR1 3LT

18:00 - 20:30

Chamber Summer BBQ
LBV Hub Social
17 Jul 2025 - 17 Jul 2025

Chamber Summer BBQ

The Borough, Dalton Square, Lancaster, LA1 1PP

17:30 - 20:00

Preston Tech Connection: Web3 is Dead. Or is It?
July Longer Banner.jpg.jpg
LBV Hub Networking
29 Jul 2025 - 29 Jul 2025

Preston Tech Connection: Web3 is Dead. Or is It?

Society1, Coworking Space, Preston, PR1 3LT

18:00 - 19:30

Preston Freelancer Meet-Up: July
Longer July Banner.jpg.jpg
LBV Hub Networking
31 Jul 2025 - 31 Jul 2025

Preston Freelancer Meet-Up: July

Society1, Coworking Space, Preston, PR1 3LT

10:00 - 11:30

Cumbria Business Expo 2025
https---cdn.evbuc.com-images-880461633-4862066883-1-original.20241022-110415.jpeg.jpg
LBV Hub Exhibitions
19 Sep 2025 - 19 Sep 2025

Cumbria Business Expo 2025

Carlisle Racecourse, Carlisle, CA2 4TS

09:00 - 15:00

Advertise with us

Reaching 50,000 members, our print, digital and event platforms offer a fantastic way to raise your business profile and help you grow.

Find out more LBV122 Online Graphic
Subscribe now

Weekly news bulletin