Time to look at your HR policies

By Kimberley Barrett-St Vall, employment and HR partner at Napthens Solicitors.

The EU’s General Data Protection Regulations will make changes to the Data Protection Act 1998. Breaching the GDPR can have significant fines of up to €20m euros or 4 per cent of the global turnover.

Businesses will benefit from adopting a holistic approach to GDPR compliance across their entire organisation, factoring in IT systems, cyber security, marketing as well as HR and employment law issues.

In this article I’m taking a closer look at the part HR will have to play in GDPR compliance:

Recruitment

Your business will be under an obligation under the GDPR to provide greater detail to candidates setting out:
  • details of the data controller
  • the category of data being processed
  • the legal basis of processing
  • the recipient
  • the processor’s details
  • if the data is to be transferred outside the EEA
  • the consequences on the employee of not providing the information on the contract
If as part of your recruitment process your business uses any form of profiling, candidates must be made aware of this and its consequences.

Employers should only collect the minimum amount of information for a specific purpose and ensure the data is stored for no longer than necessary. Access should be restricted in consideration of what is necessary.

Processing Employee Data

It is common practice for employers to use the employee’s consent as the basis of processing personal data. Even prior to the GDPR this approach was criticised, as it is questionable whether consent can be given “freely in an informed fashion and specific and explicit”, given it is often conditional on the offer of employment.

Going forward you should rely on the legal basis for processing employee personal data. Businesses must ensure processing is based on one of the following:
  1. for compliance of a legal obligation e.g. payroll processing data to ensure the employee is paid
  2. for the performance of a contract e.g. processing data in the context of healthcare insurance provision
  3. based on a legitimate interest of the employer (or third party processor)
Data Subject Access Request

Post May 2018 there will be no fee to pay if employees make a data subject access request and requests must be dealt with in 30 days (currently 40). There is likely to be an increase in requests and it is important you understand how to handle these requests efficiently. The GDPR is clear - it requires employers to demonstrate compliance. I suggest this involves more than a tickbox exercise and rather a change in culture with a commitment to embrace the GDPR. Given your Data Protection Officer cannot be everywhere at all times, cascading understanding and awareness through new policies and procedures and support through training for your employees will be vital.

Enjoyed this? Read more from Lancashire Business View

Latest news

1

College restaurant honoured with top culinary award from prestigious chefs’ guild Karen Lilley Front Of House Lecturer David McKown David Lyon Scholars Manager And Blackburn College Principal Dr Fazal Dad

College restaurant honoured with top culinary award from prestigious chefs’ guild

10 Jun 2025

2

Cosmetic manufacturer lets new unit on Frontier Park, Burnley Badgequo have agreed to let the site on Frontier Park

Cosmetic manufacturer lets new unit on Frontier Park, Burnley

10 Jun 2025

3

SQ Digital celebrates 25 years and enters new era with CEO appointment Kamal Essa

SQ Digital celebrates 25 years and enters new era with CEO appointment

09 Jun 2025

4

New chair appointed to Atlas BFW Management Graham Cowley

New chair appointed to Atlas BFW Management

09 Jun 2025

5

Napthens makes key appointments to further growth strategy of newly appointed managing director Napthens appointments Jayna Mistry, Onyeka-Obedi and Rebecca Rhodes

Napthens makes key appointments to further growth strategy of newly appointed managing director

09 Jun 2025

Background image for hub sign up block

LBV Hub

Leverage Lancashire Business View platforms

Post your news
Post your events
Post your offers
Build your network
Improve your SEO
Gain coverage in the magazine
Sign-up
Events
Sub36 Networking
Sub36 Social1200pxandi Lewis
Networking
11 Jun 2025

Sub36 Networking

Mytton Fold Hotel , Blackburn , BB6 8AB

09:30 - 11:00

Lancashire Net Zero Carbon Conference
Net Zero Carbon Social 1200pxtrident 2
Networking
18 Jun 2025

Lancashire Net Zero Carbon Conference

Crow Wood Hotel & Spa Resort, Burnley, BB12 0RT

08:30 - 13:00

LBV123 July/August Launch Event
Lancashire Business View magazine launch
Networking
16 Jul 2025

LBV123 July/August Launch Event

Burnley College Industry Hub, Burnley, BB120AN

08:30 - 10:30

Lancashire Built Environment Conference 2025
BEC 315 X 315 Px
Networking
25 Sep 2025

Lancashire Built Environment Conference 2025

Blackpool Football Club, Blackpool, FY1 6HX

08:30 - 13:00

CMI Level 5 Management and Leadership Course
UCLanAerialCampus.jpg.jpg
LBV Hub Seminars
21 Feb 2025 - 21 Feb 2026

CMI Level 5 Management and Leadership Course

Preston Campus, Preston , PR1 2HE

09:00 - 17:00

CMI Level 5 Project Management Course
UCLanAerialCampus.jpg.jpg
LBV Hub Seminars
21 Feb 2025 - 21 Feb 2026

CMI Level 5 Project Management Course

Preston Campus, Preston, PR1 2HE

08:00 - 17:00

RISE - The Academy for Female Leaders and Managers
WENDY BOWERS RISE Illustrstion copy.jpg.jpg
LBV Hub Seminars
02 Apr 2025 - 08 Oct 2025

RISE - The Academy for Female Leaders and Managers

East Lancashire Chamber of Commerce, Clayton le Moors, BB5 5JR

09:00 - 15:30

Preston Freelancer Meet-Up
LBV Hub Networking
12 Jun 2025 - 12 Jun 2025

Preston Freelancer Meet-Up

Society1, Coworking Space, Preston, PR1 3LT

10:00 - 11:30

The Business Network Central & East Lancashire
LBV Hub Networking
12 Jun 2025 - 12 Jun 2025

The Business Network Central & East Lancashire

Stanley House, Blackburn, BB2 7NP

11:30 - 14:15

Midnight Oil: The Entrepreneur’s Journey: Scaling Strategies with Brad Waldron
BU-June-Event-BRAD-1.jpg.jpg
LBV Hub Networking
18 Jun 2025 - 18 Jun 2025

Midnight Oil: The Entrepreneur’s Journey: Scaling Strategies with Brad Waldron

Blackpool Football Club, Bloomfield Rd, Seasiders Way, Blackpool, FY1 6JJ

08:30 - 11:30

Chamber Business Lunch – June
Chamber Logo1.png.png
LBV Hub Networking
20 Jun 2025 - 20 Jun 2025

Chamber Business Lunch – June

Lancaster House Hotel, Bailrigg, Lancaster, LA1 4GL

11:00 - 13:30

90 day Business Planning Workshop
LBV Event Header.png.png
LBV Hub Seminars
20 Jun 2025 - 20 Jun 2025

90 day Business Planning Workshop

Bolton Arena, Arena Approach, Horwich, BL6 6LB

09:00 - 16:30

Advertise with us

Reaching 50,000 members, our print, digital and event platforms offer a fantastic way to raise your business profile and help you grow.

Find out more LBV122 Online Graphic
Subscribe now

Weekly news bulletin