Data Protection: Employment

Data Protection

Employee's consent to the processing of personal data is required. This can be achieved by including a provision in the employment contract.

Under the Data Protection Act 1998 information contained in a relevant filing system is covered as well as automated information stored on a computer.

Employees are entitled to be given descriptions of the data and its' recipients and to have access to the data in an intelligible form.

Further conditions apply in relation to sensitive personal data (as defined by the 1998 Act).

A "reasonable fee" (generally up to £10) may be charged for the supply of personal data to the data subject requiring it by a Subject Access Request and requires that such information be supplied within 40 days at the latest.

It is recommended that the detailed practices and procedures that a data controller establishes be discussed with unions and employees and staff should also be given training on appropriate use of personal data.