Latest in Employment Law>Articles>If employees willingly provide personal email addresses at the start of their employment and their personal email addresses were used to contact them while they worked from home during the Coronavirus Lockdown, is this a breach of data protection?
If employees willingly provide personal email addresses at the start of their employment and their personal email addresses were used to contact them while they worked from home during the Coronavirus Lockdown, is this a breach of data protection?
Published on: 06/07/2021
Article Authors The main content of this article was provided by the following authors.
Chris Fullerton
Chris Fullerton

If employees willingly provided a personal email addresses and these were subsequently used to contact them at home during the Covid Lockdown, is this a breach of data protection?

If employees provide personal email addresses at the start of their employment and their personal email addresses were used to contact them while they worked from home during the Coronavirus Lockdown, is this a breach of data protection?

It will be important to check the content of your privacy notice in the first instance. Depending on the content of your privacy notice, if an employee provides a personal email address, you should generally only use this for contact where reasonably required for business purposes (ensuring to do so fairly).

Advice from the Information Commissioner on complying with data protection during times of remote working encourages employers to use the minimum amount of personal data as necessary. If employers are in doubt about their data protection compliance in light of changes necessitated by the COVID-19 pandemic, they should conduct a Data Protection Impact Assessment.

A Data Protection Impact Assessment is a process to help employers identify and minimise the data protection risks of a project, action or practice. Where a project, action or practice requires the processing of personal data, your Data Protection Impact Assessment must:

  1. Describe the nature, scope, context and purposes of the processing;
  2. Assess necessity, proportionality and compliance measures;
  3. Identify and assess risks to individuals; and
  4. Identify any additional measures to mitigate those risks.

Continue reading

We help hundreds of people like you understand how the latest changes in employment law impact your business.

Already a subscriber?

Please log in to view the full article.

What you'll get:

  • Help understand the ramifications of each important case from NI, GB and Europe
  • Ensure your organisation's policies and procedures are fully compliant with NI law
  • 24/7 access to all the content in the Legal Island Vault for research case law and HR issues
  • Receive free preliminary advice on workplace issues from the employment team

Already a subscriber? Log in now or start a free trial

Disclaimer The information in this article is provided as part of Legal Island's Employment Law Hub. We regret we are not able to respond to requests for specific legal or HR queries and recommend that professional advice is obtained before relying on information supplied anywhere within this article. This article is correct at 06/07/2021