Employers will need to prepare in 2017 for the EU General Data Protection Regulation (GDPR) although it does not come into effect until May 2018.
Employers will need to carry out audits of employee personal data that they collect and process to ensure that the it meets the GDPR conditions for employee consent.
New governance and record-keeping requirements means that employers will also have to create or amend any policies and processes on privacy notices, data breach responses and subject access requests.
More importantly, businesses that are not compliant by May 2018 risk fines of up to €20 million or 4% of annual worldwide turnover, whichever is higher.
Contact
us for more details on 01245 261883