What are the requirements in a Privacy Notice?

• An employer needs to identify who the controller of data is.
• Within the Notice, the employer is required to set out what Principles the Data Controller and Data Processor must comply with.
• The kind of information the employer holds about the employee.
• The type of information e.g whether it falls within special categories which is sensitive and requires higher level of protection
• How the information is collected.
• How the information is going to be used.
• What happens if the employee fails to provide the information.
• What happens if there is a change in purpose of information which has been collected – can you use for some other purpose?
• How the company will use sensitive information.
• What are the obligations on the employer to the employee?
• Do you need the employee’s consent?
• What is automated decision making and does this apply to the employer?
• What about sharing data and third party data holding or receiving?
• Data Security
• Data Retention
• Rights of Access, Correction,  Erasure and Restriction  
• The Employees Rights
• The Right to withdraw consent
• Changes to the Notice
• It is very important that this notice is correct, clear and unambiguous.  
• Similar information will also need to be made available to customers.  

We can review or draft notice for you to ensure it is GDPR compliant.

Looking for Privacy Notice Help?

Buy Your Privacy Notice Online