Home » Data Protection in the Workplace

Data Protection in the Workplace

What is data protection?

Data protection is about making sure that personal data about staff isn’t misused. In the digital age, this has become even more of a challenge, because big files of data can be sent around the world at the click of a button.

Why is it important?

Employers who ignore their data protection duties can face reputational damage, big fines and even criminal prosecution. For employees, the misuse of their personal data can cause serious harm and privacy breaches.

What is the GDPR?

The GDPR is a set of data protection laws which apply across the EU. Even though the UK is no longer part of the EU, the GDPR remains in force here through the Data Protection Act 2018.

What does the GDPR say?

The GDPR aims to improve the level of control and rights that individuals have over their personal data. It also sets out how an employer should go about using the personal data of its staff.

What documents should an employer have in place to comply with the GDPR?

  • A clause in each individual employment contract;
  • A privacy notice;
  • A data protection policy;
  • A data sharing agreement – for when staff data is shared with third parties.

It’s important for employers to get these documents in place, drafted correctly and updated when necessary. Our employment solicitors are hugely experienced in drafting and updating these documents.

Should an employer have a Data Protection Officer?

Technically, only if an employer is a public authority or if they carry out large-scale monitoring of staff or large-scale use of criminal or health data. However, it’s good practice for every employer to appoint someone to be responsible for data protection within their organisation. This person can be responsible for keeping documents like data protection policies and privacy notices up to date and also be the contact for any data breaches.

What is a Subject Access Request?

A subject access request is when an employee (or former employee) makes a written request for all information that their employer (or former employer) holds about them. Within 1 month of receiving a request, an employer must send to the employee copies of the information and documents requested. If the request is complex, the employer can have an extra 2 months to comply.

What is a data breach?

A data breach happens when an employer shares an employee’s personal data in a way that is unauthorised.

What an employer should do in the event of a data breach?

A record should be kept internally of all data breaches. However, for more serious breaches, the employer will also need to inform the Information Commissioner’s Office.

Can an employer be penalised for any failures?

Yes, there are potential fines and criminal sanctions for employers who breach GDPR.

If you need any advice on data protection or the GDPR in the workplace, please contact a member of our employment law team in confidence here or on 02920 829 100 for a free initial call to see how they can help.


To speak to one of our experts today, please contact us on 02920 829 100 or by using our Contact Us form for a free initial chat to see how we can help.

Contact Our Team
Bríd Price
Solicitor
View Profile
Damian Phillips
Partner
View Profile
Fflur Jones
Managing Partner
View Profile
Fiona Sinclair
HR Consultant
View Profile
Heledd Evans
Trainee Solicitor
View Profile
Nicole Brendel
Solicitor
View Profile
Owen John
Partner
View Profile
Rachel Ford-Evans
Senior Associate
View Profile
Seren Trigg
HR Consultant
View Profile

I have worked with Darwin Gray for a number of years and the level of service, professionalism and timely response is second to none. I would highly recommend Darwin Gray to any business.”

Becs Beslee
Dice FM Ltd

Darwin Gray have provided us with a first-class service for many years now. They really take the time to understand our business and develop relationships which results in advice and support that is contextualised and effective.”

Rebecca Cooper
ACT Training

We have worked with Darwin Gray for several years and have always found their services and advice to be first class.”

Karen Gale
Stepping Stones Group

An extremely professional and sincere company who make time for your queries and understand the need to break down certain facts and information to ensure everything is understood perfectly. I would highly recommend the company to anyone looking for any type of legal advice”

Gwawr Booth
Portal Training Ltd

PSS has worked with Darwin Gray for many years. We have always received an excellent service. Prompt and professional advice and support.”

Ledia Shabani
Property Support Services UK Ltd

We have used several departments within DG recently and we have been very pleased with an effective, efficient and down to earth service. Very happy thus far and I expect that we will continue to use DG.”

Guto Bebb
Farmers’ Union of Wales

Darwin Gray offer us truly superb services. Very professional, quick and services available bilingually which is very important to us, highly recommend.”

Iwan Hywel
Mentrau Iaith Cymru

My “go to” in urgent and time sensitive cases for direction, support and advice. The team are quick to respond to calls or emails for advice and support on all matters. Always explain complex matters in a way a lay person can easily understand.”

Margot Adams
Guarding UK Ltd

Darwin Gray have acted for myself and my company over a number of years and at all times we have been treated with a professional manner yet maintain a common-sense approach at all levels. We couldn’t recommend them more highly.”

Simon Baston
Loft Co

We have been clients of Darwin Gray for many years; they’ve always dealt with all of our legal matters with such professionalism. They work around us, even during awkward hours, and we feel confident we can always rely on them.”

Louise Williams
ACT Training

Darwin Gray has been acting for Siltbuster for more than ten years. We would have no hesitation in recommending Darwin Gray to other organisations small or large.”

Richard D Coulton
Siltbuster Ltd

From the very first conversation, I had no doubt that Darwin Gray should be the firm to receive our instructions on this matter. I would have no hesitation in recommending Darwin Gray.”

Sandra Warr
Tomos TV

We regularly instruct Darwin Gray. Their service in dealing with our transactional matters and disputes is always professional, prompt and efficient.”

John Poppleton
Absolute Property Management Solutions Ltd

Darwin Gray guided me through a long and extended process that would have been much more difficult had it not been for their patience and constant support.”

Ifan Lewis

Excellent and efficient service. Great result achieved, highly professional and transparent on pricing. Would recommend.”

David Stevens

Superb legal service provided. Exceeded expectations. They went above and beyond in order to provide the best service possible.”

Huw Pickrell

Very professional and understanding. They were a calming influence in a very troubling situation and they brought it to a very successful conclusion”

Rachel Jones

We have used Darwin Gray and have been seriously impressed. The personal approach is what Darwin Gray are excelling on and is the reason why we will continue to work with them in the future.”

Cadwyn Housing Association