Data Protection – GDPR comes into force
Friday 2nd February 2018
On 25 May 2018 the General Data Protection Regulations (‘GDPR’) will come into force, replacing the outdated Data Protection Act and regulating the way in which employers can store and process their employees’ data. Notable changes of which employers should be aware include a restriction in how a data subject’s ‘consent’ is defined, which will in effect mean employers will often need to find an alternative lawful basis for processing employee data, and the imposition of a requirement for employers to report data breaches to the Information Commissioner’s Office within 72 hours.
If you require advice on ensuring your organisation is GDPR-ready, please contact a member of the Employment Team.
