November 26, 2017
McGuireWoods London labor and employment lawyer Sarah Thompson authored back-to-back articles for GDPR:Report on European Union data protection laws and how new General Data Protection Regulation requirements will affect them.
Thompson’s Nov. 17 column walked employers through legal considerations and steps they should take before monitoring employees in the workplace.
She recommended that employers perform data protection impact assessments; document the legal grounds for processing employees’ personal data in the context of monitoring; inform employees that monitoring may take place; use information gathered only for the purpose for which the monitoring was conducted; and keep all data secure and permanently delete it when it no longer serves a purpose.
Her Nov. 20 article described how to handle a subject access request (SAR). She explained what a SAR is, commented on recent cases, offered guidance on upcoming GDPR-related changes, and explained what an employer who receives a SAR should do or not do.
These are the latest of Thompsons’s articles geared toward helping businesses prepare for the impacts of GDPR when it takes effect in May 2018. Her columns have appeared in Employee Benefits and Personnel Today, and she discussed the issue in a podcast presented by Expert HR.