Employment law - Data protection




Order by:
Filter by:
doc
Letter
GDPR consent to use of employee's imageNormally, you can't rely on an employee's consent as the lawful basis for processing their personal data. However, using their image in marketing materials can be an exception if they have a genuine choice about wh... Read more
UPDATED12 Apr 2019
Credits: 1
doc
Document
GDPR data protection impact assessmentA data protection impact assessment is required where a new type of processing is likely to result in a high risk to the rights and freedoms of data subjects. Use our document as your starting point.What's a DPIA?... Read more
UPDATED12 Apr 2019
Credits: 1
doc
Clause
GDPR data processor clausesIf you use any third-party processors to handle employees' personal data, you must by law include a number of key written terms governing data protection in the commercial contracts you enter into with them.Processor obligat... Read more
04 Jan 2019
Credits: 1
doc
Form
GDPR personal data breaches registerThe EU General Data Protection Regulations (GDPR) requires you to document all personal data breaches, whether they're notifiable to the Information Commissioner's Office (ICO) or not. Use our register to do this.Man... Read more
09 Nov 2018
Credits: 1
doc
Letter
GDPR letter notifying personal data breachAs well as notifying the Information Commissioner's Office (ICO), certain personal data breaches must also be notified to affected data subjects. Your notification to them must, as a minimum, describe the natu... Read more
13 Sep 2018
Credits: 1
doc
Form
GDPR register of data subject access requestsThe GDPR requires you to demonstrate that you're complying with the data protection principles. Maintaining a GDPR register of data subject access requests can help you show that you're observing subject acc... Read more
08 Jun 2018
Credits: 1
doc
Letter
Letter to ex-employee threatening to contact ICOUse our letter where you believe a former employee has taken personal data with them on leaving employment, such as client records, without your permission. Unlawfully obtaining personal data is a crimi... Read more
24 May 2018
Credits: 1
doc
Policy
GDPR data breach policy and response planUse our document to ensure the prompt and effective detection, investigation, reporting and resolution of personal data breaches.Personal data breachUnder the EU General Data Protection Regulation (GDPR), cert... Read more
11 May 2018
Credits: 1
doc
Letter
GDPR data subject access response letterUse our GDPR data subject access response letter to set out your reply to a data subject access request that's been made under the GDPR.Response requirementsThe EU General Data Protection Regulation (GDPR) enabl... Read more
11 May 2018
Credits: 1
doc
Clause
GDPR employee monitoring clauseInsert our clause into employees' employment contracts to reserve the right to monitor their use of your communications and computer systems. You'll need a lawful basis for processing and you must limit monitoring to the ... Read more
11 May 2018
Credits: 1