--- title: "GDPR and HR: What does HR need to know about GDPR? | myhrtoolkit" description: Find out what your organisation and employees need to know about GDPR and HR to ensure data compliance in regards to HR records. image: https://www.myhrtoolkit.com/hubfs/GDPR-and-HR.jpg --- ** Call us ** Menu ** [0345 225 0414](tel:03452250414) - [Customer Support **](https://www.myhrtoolkit.com/support) - [Login **](https://app.myhrtoolkit.com/user_portal/) [![myhrtoolkit-agilio-logo-colour-800px](https://www.myhrtoolkit.com/hs-fs/hubfs/Logos%20and%20Brand/myhrtoolkit-agilio-logo-colour-800px.png?width=800&height=82&name=myhrtoolkit-agilio-logo-colour-800px.png "myhrtoolkit-agilio-logo-colour-800px")](http://myhrtoolkit.com) [![myhrtoolkit-agilio-logo-white](https://www.myhrtoolkit.com/hs-fs/hubfs/Logos%20and%20Brand/myhrtoolkit-agilio-logo-white.png?width=1000&height=103&name=myhrtoolkit-agilio-logo-white.png "myhrtoolkit-agilio-logo-white")](http://myhrtoolkit.com) # GDPR and HR: What does HR need to know about GDPR? | myhrtoolkit Published on March 9, 2018 by [Fiona Sanderson](https://www.myhrtoolkit.com/blog/author/fiona-sanderson) **    [GDPR](https://www.myhrtoolkit.com/blog/tag/gdpr) · [HR](https://www.myhrtoolkit.com/blog/tag/hr) · [Resources](https://www.myhrtoolkit.com/blog/tag/resources) ![](https://www.myhrtoolkit.com/hubfs/GDPR-and-HR.jpg) The new General Data Protection Regulations (GDPR) are coming into force on the 25th May 2018. These regulations will significantly change data protection law in the UK.  For HR in particular, GDPR means big changes to the way in which we manage the data we hold about employees. However, there are ways to make sure GDPR and HR work together in harmony for your organisation. The new regulations ensure that organisations only collect the minimum amount of personal data and keep it for no longer than absolutely necessary.  In terms of the processing of any data that is collected, it must be limited to that specific purpose. ## GDPR and HR: 5 Key Facts Here are the five most important things to know about when it comes to GDPR and HR records and practices: ### **Consent** When we process people data, typically we rely on a clause in a Contract of Employment that provides consent to do so. This isn’t going to be the case under GDPR; consent must be ‘freely given, informed, specific and explicit’. So a general contractual clause will no longer suffice. The [HR function](https://www.myhrtoolkit.com/blog/how-can-sme-improve-hr-functions) will need to ensure they gain appropriate consent to lawfully process employee data or rely on other legal grounds to do so. ### **Subject Access Data Requests** In HR we are used to handling [subject access requests](https://www.myhrtoolkit.com/blog/hr-software-help-respond-sar) from employees to see the data that we hold about them. Under GDPR, the data now has to be provided within one month. In addition, you will no longer be able to make a charge for providing it. The GDPR may well lead to increased employee awareness of the right to request the data held about them. Due to this, HR should prepare for additional applications. ### **Information at the point of data collection** Under GDPR, employers will need to provide more information to people about how their data will be processed at the time they collect it. There is a lengthy list of the information that needs to be provided, and if data is then processed for a new purpose employees must be notified again. ### **Data Breaches** If your employee data is subject to any type of data breach, IT related or otherwise, you must now proactively [report this](https://ico.org.uk/for-organisations/report-a-breach/) to the Information Commissioner. You will need to have a process to ensure that this happens. ### **Data Breach Claims** The GDPR will make it easier for individuals to bring claims against employers in the event of a data breach – and receive financial compensation for loss or hurt feelings. At the same time, fines against companies for non-compliance will be much higher than under current data protection legislation. Taking all of this into account, there are some steps that HR should be taking right now. Here are our top recommendations: - Audit your current processes.  What people data are you processing? How do you then manage it? What people data are you transferring to other organisations such as benefits providers?   Identify any potential risks and take action. - Review the data that you are holding about your employees, former employees and job applicants today. If you don’t need it, then it’s time to delete or destroy it. - Update information provided to job applicants and employees about how their data will be processed to ensure it complies with the enhanced provisions under GDPR. - Check your current HR policies that relate to data processing and update them accordingly. Consider your policies on recruitment, absence, references and employee monitoring in particular. - Consider how you will handle requests for personal data in the future and put a procedure in place to respond to data subjects. #### HR and GDPR: the main takeaway Finally, the most important thing HR can do in terms of preparing for the GDPR is start now! For more information about myhrtoolkit's approach to GDPR, read our [privacy policy](https://www.myhrtoolkit.com/privacy/). #### Related articles [HR and GDPR - one year on](https://www.myhrtoolkit.com/blog/hr-gdpr-one-year-on) [How to choose GDPR compliant HR software](https://www.myhrtoolkit.com/blog/gdpr-and-hr-systems) Share this: [![](https://www.myhrtoolkit.com/hubfs/social%20share%20icons/linkedin-share-icon.png) ](http://www.linkedin.com/shareArticle?mini=true&url=https://www.myhrtoolkit.com/blog/gdpr-and-hr&utm_medium=social&utm_source=linkedin) [![](https://www.myhrtoolkit.com/hubfs/social%20share%20icons/twitter-share-icon.png) ](https://twitter.com/intent/tweet?url=https://www.myhrtoolkit.com/blog/gdpr-and-hr&utm_medium=social&utm_source=twitter) [![](https://www.myhrtoolkit.com/hubfs/social%20share%20icons/facebook-share-icon.png) ](http://www.facebook.com/share.php?u=https://www.myhrtoolkit.com/blog/gdpr-and-hr&utm_medium=social&utm_source=facebook) ![Picture of Fiona Sanderson](https://www.myhrtoolkit.com/hubfs/HR%20Toolkit%20-%20106.jpg) #### Written by [Fiona Sanderson](https://www.myhrtoolkit.com/blog/author/fiona-sanderson) Fiona is Marketing Manager at myhrtoolkit. Her areas of expertise include HR systems, productivity, employment law updates, and creating HR infographics. [LinkedIn](https://www.linkedin.com/in/fionasanderson/) ![Free Data Migration](https://cdn2.hubspot.net/hub/2662000/hubfs/MYhrtoolkit%20Assets%20july%202019/data-migration.png?width=114&height=89&name=data-migration.png) ###### free data migration ![Unlimited Free Support](https://cdn2.hubspot.net/hub/2662000/hubfs/MYhrtoolkit%20Assets%20july%202019/free-support.png?width=114&height=89&name=free-support.png) ###### unlimited free support ![3 month MOT](https://cdn2.hubspot.net/hub/2662000/hubfs/MYhrtoolkit%20Assets%20july%202019/mot.png?width=114&height=89&name=mot.png) ###### 3 month MOT ## Call 0345 225 0414 for more information [![Start Free Trial](https://no-cache.hubspot.com/cta/default/5034683/7a8a8231-ca09-4f3d-86b2-3c7e203a47be.png)](https://cta-redirect.hubspot.com/cta/redirect/5034683/7a8a8231-ca09-4f3d-86b2-3c7e203a47be) #### Myhrtoolkit features #### Information #### Resources t: 0330 236 8399 e: [enquiries@myhrtoolkit.com](mailto:enquiries@myhrtoolkit.com) [**](https://www.facebook.com/myhrtoolkit) [**](https://twitter.com/myhrtoolkit) [**](https://www.linkedin.com/company/myhrtoolkit-limited) © 2021 myhrtoolkit Limited, HR software on demand. All rights reserved. Various trademarks held by respective owners. Unit 18 Jessops Riverside, 800 Brightside Lane, Sheffield S9 2RX Remove cookies    ** Top ```json // Business name, address, opening hours, logo social profiles { "@context" : "http://schema.org", "@type": "LocalBusiness", "@id": "/blog/gdpr-and-hr", "name" : "Myhrtoolkit Ltd", "logo" : "https://www.myhrtoolkit.com/hubfs/Logos%20and%20Brand/favicon-teal.svg", "image" : "https://www.myhrtoolkit.com/hubfs/Logos%20and%20Brand/favicon-teal.svg", "url": "https://www.myhrtoolkit.com/", "address": { "@type": "PostalAddress", "streetAddress": "Unit 18 Jessops Riverside", "addressLocality": "Sheffield", "addressRegion": "South Yorkshire", "postalCode": " S9 2RX" }, "telephone": "0345 225 0414", "openingHours": [ "Mo-Fr 09:00-17:30" ], "email" :"sales@myhrtoolkit.com", "sameAs" : [ "https://twitter.com/myhrtoolkit", "https://www.linkedin.com/company/myhrtoolkit-limited", "https://plus.google.com/+myhrtoolkit" ], "description": "HR Software for SMEs" } } ``` ```json // Colloquial site name - for mobile SERPs { "@context" : "http://schema.org", "@type" : "WebSite", "name" : "myhrtoolkit", "url" : "https://www.myhrtoolkit.com/" } ``` ```json { "@context" : "http://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Fiona Sanderson" }, "dateModified" : "February 17, 2021, 5:44:10 PM", "datePublished" : "2018-03-09 11:58:46", "description" : "Find out what your organisation and employees need to know about GDPR and HR to ensure data compliance in regards to HR records.", "headline" : "GDPR and HR: What does HR need to know about GDPR? | myhrtoolkit", "image" : { "@type" : "ImageObject", "url" : "https://cdn2.hubspot.net/hubfs/5034683/GDPR-and-HR.jpg" }, "mainEntityOfPage" : { "@id" : "https://www.myhrtoolkit.com/blog/gdpr-and-hr", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://f.hubspotusercontent30.net/hubfs/5034683/Sales%20images/myhrtoolkit-agilio-logo-colour-padded.png" }, "name" : "Agilio Software" } } ```