All businesses who employ individuals process the personal data
of those employees ("data subjects"). With the recently
published Data Protection Bill 2018 providing insight into the
local law derogations from the GDPR and relevant enforcement
procedure provisions under Irish law, now is the perfect time for
employers to review their preparations to ensure they are
"GDPR-ready" by 25 May 2018.
1. CONFIRM THE BASIS ON WHICH EMPLOYEE DATA IS PROCESSED
Employers must have a lawful basis on which to process the
personal data of employees. The GDPR provides six lawful bases
under which an organisation may process personal data, as outlined
our GDPR for Employers - Guide to Bases of Processing.
