This is part 3 of a 7 part series exploring the far-reaching subject of GDPR. If you’ve missed the first part, you can find it here.

GDPR Session 3

Conduct an HR Audit to identify and record all personal data you currently hold. The following is a list of some HR-specific areas you may wish to consider:-    

  • Recruitment Activity: adverts, CV’s, interview material, psychometric/ability tests;
  • Employment Contracts, Offer Letters and Handbook;
  • Right to Work Checks and DBS;
  • Personal Details forms (containing bank details, referees, next of kin);
  • Employee Benefits (pension, medical/dental cover, car/car allowance);
  • Company Equipment (laptop, mobile telephone, photographic ID);
  • Payroll information and deductions (contractual and statutory);
  • Employee Monitoring (absence, Equal Ops, disciplinary, grievance, Health and Safety);
  • Family Friendly (maternity, adoption, flexible working, parental/shared parental leave);
  • All HR-related policies (specifically your current Data Protection policy);
  • Employee Monitoring (CCTV, emails, telephone calls);
  • Termination of Employment (redundancy, references, TUPE transfer).

The content of this document refers to GDPR compliance in relation to HR data and employees only.  Therefore it is recommended that further guidance is sought for GDPR compliance in other business areas.  Unsurprisingly we’ve been unable to cover all HR-related topics in this Blog, please contact us if you would like to receive a copy of the full document by sending an email to: jannine@nullb2phr.co.uk. 

We have also compiled an HR GDPR pack (please note these documents only relate to HR-activities) consisting of the following templates:-

  • Data Protection Impact Assessment (DPIA) spreadsheet;
  • Employee Privacy Notice Template (individual employee notification letters)
  • Privacy Notice (General to be issued to employees explaining how HR-related activities will be processed in-line with GDPR)
  • Privacy Notice (Candidate version for potential job applicants explaining how HR-related activities will be processed in-line with GDPR)
  • Data Protection Policy (template)

We would be very happy to share these with you for a small one-off fee of £150 + VAT (to cover research / development time and costs).