Yes, but you must be clear about your reasons for doing so. To comply with data protection obligation, employers must have a legal basis for processing such information and ensure they comply with the conditions for processing special category data relating to employees’ health, under the UK GDPR: http://bit.ly/ICOspecialcategorydata The Information Commissioner’s Office (ICO) publishes…
There are particular circumstances where an employer may need to obtain a medical report for a prospective, or existing employee, for example: where health or fitness is a determining factor of the employee’s ability to do the job and may precede the employer being able to confirm a conditional job offer, or; where an employer…
Whilst it may previously have been commonplace to catch up on work by sending home work emails, this is a clear breach of GDPR laws. Whether knowingly or not, by taking this action, an employee will have forwarded sensitive client information and potentially, their employer’s intellectual property onto a third party. Employees are often not…
No, it is not necessary for employers to amend the contracts of existing employees to comply with the General Data Protection Regulation (GDPR), which comes into effect 25th May 2018.However, employers should issue a new Privacy Notice to employees, providing information on the processing of their personal data and superseding any out of date data…