Global menu

Our global pages

Close

Forthcoming events and seminars

Employee data update

Who should attend

HR and compliance professionals or in-house lawyers responsible for employee data and employment policy. This course assumes knowledge of data protection principles and basic awareness of GDPR changes.

Synopsis

Data protection law had to be updated to reflect the volume of information that is routinely collected, the portability of data and the increased risk of damage from misuse. The GDPR permits EU member states to introduce their own laws in some areas, most notably in employment law, and the UK’s Data Protection Act 2018 fills this gap. The Data Protection Act changes the way HR collects and uses staff information and what they must tell staff about the information they store about them.

HR used to hang on to employee data in case it was needed one day. Now, unless there is good reason, data should not be collected in the first place or retained for longer than is justifiable.

A disgruntled staff member is probably an organisation’s most likely source of a data compliance complaint. This update covers developments relating to HR data collection, security and retention use and processing including employee privacy notices, staff monitoring, and wearables.

Programme

09.00 registration and coffee, 09.30 start

A recap of the new legal framework for employee data

  • key principles, minimisation, limitation, accuracy, security and transparency
  • new concepts and practices including ‘legitimate business activity’ and use of consent
  • fines, class action, criminality, sanctions and corrective powers

Key HR issues: employment lifecycle

  • enhanced data subject rights including access, erasure and complaints
  • recruitment including use of agencies and DP responsibility, automated processing, data flows of special category/ sensitive data, background checks and CVs
  • IT and web use and misuse, instant messaging, email, wearables and monitoring
  • performance management, feedback and DSARs
  • disciplinary and grievances: confidentiality duties
  • health and medical information: third parties and contractors
  • the end of the contract, transfers and HR data retention
  • HR’s role as a data lead

Movement of HR data and sharing

  • data sharing between individuals, colleagues, sites, group structures, service providers and across borders
  • international variation: country-specific data law

Accountability and responsibility?

  • DPO responsibilities and protected status: disagreement and conflicts
  • the Board’s accountability and delegation
  • increased use and significance of privacy impact assessments
  • demonstrable compliance: beyond tick box
  • reporting data breaches to ICO, clients or individuals

Case law update

  • various claimants v WM Morrisons Supermarket (2017): vicariously liable for a rogue employee’s act
  • Hollyoak v Candy (2017): subject access requests, proportionate searches

16.30 close

Download the full Employee data update programme

 

 

Speakers

 

Rob Smedley
Principal Associate, Employment Law

During the last year, Rob has worked with a wide range of organisations in respect of GDPR compliance programmes concerning employee and staff data. He has delivered public and in-house training and assisted in the preparation of key compliance documents and procedures. Rob also has experience of handling Data Subject Access Requests.

Daniel Allan
Principal Associate, Employment Law

Dan specialises in employment law in particular employee data protection/GDPR and modern slavery. He has recently project managed a large employee DSAR involving 145,000 documents,and helped remove a CEO from a large company. He has worked in-house on secondment in two large businesses.

David Hughes
Principal Associate, Privacy and Information Law

Dave works with clients to identify data privacy compliance gaps and solutions for improvement. His work includes subject access requests; managing security breaches and complaints to the Information Commissioner’s Office.

 

Annual training course brochure

You can open an interactive version of our training course brochure. Alternatively, register to receive regular course updates.