Member tool: CIPD Buddy AI AI
Use AI to find trusted answers on our Knowledge hub. Start using CIPD Buddy AI

Essential points 

  • Data protection is about safeguarding important information and making sure it is used properly and legally.
  • Data protection is a legal entitlement. There are core UK GDPR and Data Protection Act 2018 principles that people professionals must follow.
  • Broadly, employers should only keep the data they need about their employees and workers to fulfil their contractual obligations (for example, paying salary), or other legal requirements (for example, paying National Insurance Contributions). This information could include name, address, date of birth, National Insurance number, bank details emergency contact details and any disciplinary action taken against them.  
  • The following page will support people professionals to know where consent is needed, the security requirements for employees’ personal data, the regularity of review of this storage and the legal obligations to notify the ICO of all data breaches.  
  • Employees also have rights to access their data (known as a SAR/DSAR) and people professionals should be aware of these rights and how they have been tested in case law. Details of this is provided in the following page. 
Member-exclusive content badge

This content is exclusive to CIPD members

Log in below to gain access to essential resources and practical advice

Content

To continue reading, log in or become a member

Affiliate membership offers instant access to CIPD resources without the need for assessments or study, or explore your options to become a professional member of the CIPD to demonstrate your commitment to the world of work.

  • Access to exclusive, up-to-date resources
  • Become part of a community to learn, debate and connect with other people professionals
  • Free access to a series of CIPD learning courses and a discount on the rest of our catalogue
Instant access Explore membership

Disclaimer 

​Please note: While every care has been taken in compiling this content, CIPD cannot be held responsible for any errors or omissions. These notes are not intended to be a substitute for specific legal advice. 

Employment
law advice

Want more employment law advice? Members can phone the CIPD legal helpline or access CIPD HR-inform Lite free for additional resources.

Employment law helpline HR-inform
Callout Image
  • Factsheet

    Retention of HR records

    Introduces the legal issues in the UK around effective retention and organisation of HR records

    For Members
  • Data

    Data Hub

    Explore the latest people profession data and how your organisation compares

    Access the data hub
    For Members
    • Employment law
  • Employment law

    Equal pay: UK employment law

    In Great Britain, the Equality Act 2010 creates a legal obligation on employers to ensure equal pay. Explore this legal requirement, and case law in this area

    For Members