Just because 25 May 2018 has passed does not mean that data
protection compliance has ended! The Data Protection Act 2018
("DPA") works with the GDPR, and introduces additional
requirements that businesses will need to watch out for; there are
however a number of derogations that are intended to better
accommodate business needs.
Special Categories of Processing
Schedule 1, Parts 1 and 2 of the DPA state that if, as an
employer, you want to engage in either of the following you must
have an appropriate policy document:
- Equality of opportunity or treatment
(diversity).
- Monitoring racial and ethnic
diversity at senior levels of the organization (diversity).
What is an "Appropriate Policy Document"?