Data protection is about making sure that personal data about staff isn’t misused. In the digital age, this has become even more of a challenge, because big files of data can be sent around the world at the click of a button.
Employers who ignore their data protection duties can face reputational damage, big fines and even criminal prosecution. For employees, the misuse of their personal data can cause serious harm and privacy breaches.
The GDPR is a set of data protection laws which apply across the EU. Even though the UK is no longer part of the EU, the GDPR remains in force here through the Data Protection Act 2018.
The GDPR aims to improve the level of control and rights that individuals have over their personal data. It also sets out how an employer should go about using the personal data of its staff.
It’s important for employers to get these documents in place, drafted correctly and updated when necessary. Our employment solicitors are hugely experienced in drafting and updating these documents.
Technically, only if an employer is a public authority or if they carry out large-scale monitoring of staff or large-scale use of criminal or health data. However, it’s good practice for every employer to appoint someone to be responsible for data protection within their organisation. This person can be responsible for keeping documents like data protection policies and privacy notices up to date and also be the contact for any data breaches.
A subject access request is when an employee (or former employee) makes a written request for all information that their employer (or former employer) holds about them. Within 1 month of receiving a request, an employer must send to the employee copies of the information and documents requested. If the request is complex, the employer can have an extra 2 months to comply.
A data breach happens when an employer shares an employee’s personal data in a way that is unauthorised.
A record should be kept internally of all data breaches. However, for more serious breaches, the employer will also need to inform the Information Commissioner’s Office.
Yes, there are potential fines and criminal sanctions for employers who breach GDPR.
If you need any advice on data protection or the GDPR in the workplace, please contact a member of our employment law team in confidence here or on 02920 829 100 for a free initial call to see how they can help.
To speak to one of our experts today, please contact us on 02920 829 100 or by using our Contact Us form for a free initial chat to see how we can help.
I have worked with Darwin Gray for a number of years and the level of service, professionalism and timely response is second to none. I would highly recommend Darwin Gray to any business.”
Darwin Gray have provided us with a first-class service for many years now. They really take the time to understand our business and develop relationships which results in advice and support that is contextualised and effective.”
We have worked with Darwin Gray for several years and have always found their services and advice to be first class.”
An extremely professional and sincere company who make time for your queries and understand the need to break down certain facts and information to ensure everything is understood perfectly. I would highly recommend the company to anyone looking for any type of legal advice”
PSS has worked with Darwin Gray for many years. We have always received an excellent service. Prompt and professional advice and support.”
We have used several departments within DG recently and we have been very pleased with an effective, efficient and down to earth service. Very happy thus far and I expect that we will continue to use DG.”
Darwin Gray offer us truly superb services. Very professional, quick and services available bilingually which is very important to us, highly recommend.”
My “go to” in urgent and time sensitive cases for direction, support and advice. The team are quick to respond to calls or emails for advice and support on all matters. Always explain complex matters in a way a lay person can easily understand.”
Darwin Gray have acted for myself and my company over a number of years and at all times we have been treated with a professional manner yet maintain a common-sense approach at all levels. We couldn’t recommend them more highly.”
We have been clients of Darwin Gray for many years; they’ve always dealt with all of our legal matters with such professionalism. They work around us, even during awkward hours, and we feel confident we can always rely on them.”
Darwin Gray has been acting for Siltbuster for more than ten years. We would have no hesitation in recommending Darwin Gray to other organisations small or large.”
From the very first conversation, I had no doubt that Darwin Gray should be the firm to receive our instructions on this matter. I would have no hesitation in recommending Darwin Gray.”
We regularly instruct Darwin Gray. Their service in dealing with our transactional matters and disputes is always professional, prompt and efficient.”
Darwin Gray guided me through a long and extended process that would have been much more difficult had it not been for their patience and constant support.”
Excellent and efficient service. Great result achieved, highly professional and transparent on pricing. Would recommend.”
Superb legal service provided. Exceeded expectations. They went above and beyond in order to provide the best service possible.”
Very professional and understanding. They were a calming influence in a very troubling situation and they brought it to a very successful conclusion”
We have used Darwin Gray and have been seriously impressed. The personal approach is what Darwin Gray are excelling on and is the reason why we will continue to work with them in the future.”