Data Protection For Employers – The Basics

Data Protection is primarily governed by the Data Protection Act 1998 (the Act). The Act is concerned with respecting the rights of individuals when their personal data is processed. Personal data means information about individuals who can be identified from that information − such as names, addresses and National Insurance numbers − and also includes the employer's opinions and intentions with respect to employees. Sensitive data is also covered and subject to more robust legal requirements. Sensitive data includes information about an individual's racial or ethnic origins, political opinions, religious or other beliefs, trade union membership, health and criminal proceedings or convictions. Generally speaking, personal data does not include day-to-day business correspondence to, from or copying the employee, where normal work activities are being carried out.