Essential points
- Data protection is about safeguarding important information and making sure it is used properly and legally.
-
Employers can keep a range of personal information about their employees without seeking their permission including their name, address, date of birth, sex, National Insurance number, emergency contact details, any disciplinary action taken against them.
-
Organisations need their employees’ consent to keep sensitive information on them such as their race or ethnicity, religion, trade union membership, health and medical conditions, sexual orientation.
-
Employers must keep employees’ personal data secure and up to date and have extra security in place to protect their sensitive personal data.
-
Employees have the right to be told what records are being kept on them, how they are used, and how their confidentiality is preserved.
CIPD member content
This content is only available for CIPD members
If you’re already a CIPD member, please sign in to access this content
Disclaimer
Please note: While every care has been taken in compiling this content, CIPD cannot be held responsible for any errors or omissions. These notes are not intended to be a substitute for specific legal advice.
Bullying
and harassment
Discover our practice guidance and recommendations to tackle bullying and harassment in the workplace.
CIPD Trust
Tackling barriers to work today whilst creating inclusive workplaces of tomorrow.
Related content on data protection
Introduces data protection law in the UK, covering the obligations of employers and individual rights to accessing information.
This guide provides managers with an overview and principles to apply when handling GDPR and data protection requirements to ensure they play their part in complying with regulations governing its safe handling.
Introduces the legal issues in the UK around effective retention and organisation of HR records
Learn more about data protection and GDPR to ensure your organisation is compliant.
The 'Retained EU law bill', or REUL, changes UK employment law.
The CIPD's dedicated legal resource on holiday entitlement for all types of worker. This page includes guidance on applying the working time directive and how the UK court system sees legal claims against employers on annual leave matters.
CIPD guidance on the legality of working hours in the UK. Workable hours and breaks are directed by the UK's Working Time Regulations, formally part of the EU Working Time Directive. Here we explore key legislation and how the courts see claims against employers.