Time to look at your HR policies

By Kimberley Barrett-St Vall, employment and HR partner at Napthens Solicitors.

The EU’s General Data Protection Regulations will make changes to the Data Protection Act 1998. Breaching the GDPR can have significant fines of up to €20m euros or 4 per cent of the global turnover.

Businesses will benefit from adopting a holistic approach to GDPR compliance across their entire organisation, factoring in IT systems, cyber security, marketing as well as HR and employment law issues.

In this article I’m taking a closer look at the part HR will have to play in GDPR compliance:

Recruitment

Your business will be under an obligation under the GDPR to provide greater detail to candidates setting out:
  • details of the data controller
  • the category of data being processed
  • the legal basis of processing
  • the recipient
  • the processor’s details
  • if the data is to be transferred outside the EEA
  • the consequences on the employee of not providing the information on the contract
If as part of your recruitment process your business uses any form of profiling, candidates must be made aware of this and its consequences.

Employers should only collect the minimum amount of information for a specific purpose and ensure the data is stored for no longer than necessary. Access should be restricted in consideration of what is necessary.

Processing Employee Data

It is common practice for employers to use the employee’s consent as the basis of processing personal data. Even prior to the GDPR this approach was criticised, as it is questionable whether consent can be given “freely in an informed fashion and specific and explicit”, given it is often conditional on the offer of employment.

Going forward you should rely on the legal basis for processing employee personal data. Businesses must ensure processing is based on one of the following:
  1. for compliance of a legal obligation e.g. payroll processing data to ensure the employee is paid
  2. for the performance of a contract e.g. processing data in the context of healthcare insurance provision
  3. based on a legitimate interest of the employer (or third party processor)
Data Subject Access Request

Post May 2018 there will be no fee to pay if employees make a data subject access request and requests must be dealt with in 30 days (currently 40). There is likely to be an increase in requests and it is important you understand how to handle these requests efficiently. The GDPR is clear - it requires employers to demonstrate compliance. I suggest this involves more than a tickbox exercise and rather a change in culture with a commitment to embrace the GDPR. Given your Data Protection Officer cannot be everywhere at all times, cascading understanding and awareness through new policies and procedures and support through training for your employees will be vital.

Enjoyed this? Read more from Lancashire Business View

Latest news

1

Preston frozen dough brand has new celebrity shareholders Ant and Dec and Amy and Chris Cheadle

Preston frozen dough brand has new celebrity shareholders

18 Jul 2025

2

Wellbeing focused co-working space with its own pub in Burnley gets ready for launch Dave Scholes and Malcolm Ireland

Wellbeing focused co-working space with its own pub in Burnley gets ready for launch

18 Jul 2025

3

UK's pioneering Combat Air Flying Demonstrator is revealed Flying Combat Air Demonstrator

UK's pioneering Combat Air Flying Demonstrator is revealed

17 Jul 2025

4

A fresh brew for The Printed Cup Company The Printed Cup Company

A fresh brew for The Printed Cup Company

17 Jul 2025

5

Joe Diston from Beever and Struthers appointed to new Global IFRS leader for HLB International Joe Diston

Joe Diston from Beever and Struthers appointed to new Global IFRS leader for HLB International

17 Jul 2025

Background image for hub sign up block

LBV Hub

Leverage Lancashire Business View platforms

Post your news
Post your events
Post your offers
Build your network
Improve your SEO
Gain coverage in the magazine
Sign-up
Events
Lancashire Built Environment Conference 2025
BEC 315 X 315 Px
Networking
25 Sep 2025

Lancashire Built Environment Conference 2025

Blackpool Football Club, Blackpool, FY1 6HX

08:30 - 13:00

CMI Level 5 Project Management Course
UCLanAerialCampus.jpg.jpg
LBV Hub Seminars
21 Feb 2025 - 21 Feb 2026

CMI Level 5 Project Management Course

Preston Campus, Preston, PR1 2HE

08:00 - 17:00

CMI Level 5 Management and Leadership Course
UCLanAerialCampus.jpg.jpg
LBV Hub Seminars
21 Feb 2025 - 21 Feb 2026

CMI Level 5 Management and Leadership Course

Preston Campus, Preston , PR1 2HE

09:00 - 17:00

Preston Tech Connection: Web3 is Dead. Or is It?
July Longer Banner.jpg.jpg
LBV Hub Networking
29 Jul 2025 - 29 Jul 2025

Preston Tech Connection: Web3 is Dead. Or is It?

Society1, Coworking Space, Preston, PR1 3LT

18:00 - 19:30

Preston Freelancer Meet-Up: July
Longer July Banner.jpg.jpg
LBV Hub Networking
31 Jul 2025 - 31 Jul 2025

Preston Freelancer Meet-Up: July

Society1, Coworking Space, Preston, PR1 3LT

10:00 - 11:30

Advantage: AI – A Workshop for Business Leaders – August 14th
Navy--Event Tile.png.png
LBV Hub Seminars
14 Aug 2025 - 14 Aug 2025

Advantage: AI – A Workshop for Business Leaders – August 14th

Door4 Office, Burnley Wharf, Burnley, BB11 1JG

09:00 - 12:00

The Business Network Central & East Lancashire
LBV Header (24).png.png
LBV Hub Networking
21 Aug 2025 - 21 Aug 2025

The Business Network Central & East Lancashire

Mytton Fold, Langho, BB6 8AB

11:30 - 14:15

Morecambe Bay Walk
Walk.jpg.jpg
LBV Hub Awards
30 Aug 2025 - 30 Aug 2025

Morecambe Bay Walk

Arnside, CARNFORTH, LA5

09:30 - 14:00

Cumbria Business Expo 2025
https---cdn.evbuc.com-images-880461633-4862066883-1-original.20241022-110415.jpeg.jpg
LBV Hub Exhibitions
19 Sep 2025 - 19 Sep 2025

Cumbria Business Expo 2025

Carlisle Racecourse, Carlisle, CA2 4TS

09:00 - 15:00

Help to grow management course
Help to grow - barriers to growth.png.png
LBV Hub Seminars
26 Sep 2025 - 16 Dec 2025

Help to grow management course

Preston Campus , Preston , PR1 2HE

09:00 - 15:00

North West Business Expo 2025
https---cdn.evbuc.com-images-880456273-4862066883-1-original.20241022-105445.jpeg.jpg
LBV Hub Exhibitions
24 Oct 2025 - 24 Oct 2025

North West Business Expo 2025

Bolton Stadium Hotel, Bolton, BL6 6SF

09:00 - 15:00

Lancashire Business Day 2025
241122lbvlancashiredaylhp0647web
Networking
27 Nov 2025

Lancashire Business Day 2025

Burnley FC , Burnley, BB10 4BX

12:00 - 17:00

Advertise with us

Reaching 50,000 members, our print, digital and event platforms offer a fantastic way to raise your business profile and help you grow.

Find out more LBV122 Online Graphic
Subscribe now

Weekly news bulletin