Since qualifying in 2018, Johanna has supported clients with disciplinary and grievance issues, defending employment tribunal claims, senior exits, redundancies, TUPE, and day-to-day HR queries. She also has a strong interest in the overlap between employment law and data protection, regularly advising on subject access requests, data breaches, employee monitoring, and matters involving cross-border workers.
What processing condition can an employer rely upon under the GDPR when providing a reference?
As a starting point, it is necessary to consider what specific personal data will be supplied as part of the reference. For example, if information on the employee’s absence levels is included in a reference and that information comprises information regarding the employee’s health, this will constitute special category data under Article 9(1) of the GDPR.
When processing personal data, the employer will have to ensure that it satisfies a lawful condition for processing as set out under Article 6(1) of the GDPR. If the employer is processing health data as part of the reference, it will also have to satisfy an additional
Continue reading
We help hundreds of people like you understand how the latest changes in employment law impact your business.
Please log in to view the full article.
What you'll get:
- Help understand the ramifications of each important case from NI, GB and Europe
- Ensure your organisation's policies and procedures are fully compliant with NI law
- 24/7 access to all the content in the Legal Island Vault for research case law and HR issues
- Receive free preliminary advice on workplace issues from the employment team
Already a subscriber? Log in now or start a free trial