As we sip champagne reflecting on the first anniversary of the
effective date of the European General Data Protection Regulation
(GDPR), we consider the obligations that employers should bear in
mind. In this article, we set out four key steps that employers
should consider taking on the road towards GDPR compliance:
1. Audit and analyse your data
Businesses should work out what data they process and focus on
the more unusual data, for example, CCTV or fingerprint access.
Employers should then consider the legal basis for which they
process that data. The most significant difference for employers
adapting to GDPR was a shift away from seeking consent to gather
and process data (which is generally not appropriate in the
employment context) to relying on other legal bases for
processing.
