GDPR Update

There have been a number of welcome updates, clarifications and new guidance notes since the General Data Protection Regulation (GDPR) came into force on May 25, 2018. We take a look at some of the key developments for organisations that control or process employee records or other personal data.

EU-US Privacy Shield Remains Adequate

The EU-US Privacy Shield is one of the mechanisms that organisations can rely on to demonstrate that they have adequate protection in place if they transfer personal data (which comprises any information about an identifiable individual and would include, for example, human resources records) from the EU to the U.S. The Privacy Shield replaced the self-certified safe harbour regime that had previously been found to be inadequate. On December 19, 2018, the European Commission (the EC) concluded its second annual review and confirmed that that the Privacy Shield framework ensures an adequate level of protection for personal data under the