Data Protection Policy

view sample document
(copy protected sample requires free adobe reader)

This Data Protection Policy sets out detailed provisions relating to the collection, use, storage and transmission of employees' data gathered in the workplace. The policy includes the principles of the Data Protection Act 1998 that should be followed by the employer and the proper procedure for handling requests from current and ex-employees for access to data relating to them.

The policy is drafted so that a named individual within the organisation has overall control of the policy and serves as a point of reference. This should normally be the head of personnel or another senior member of management.

Key clauses in this agreement include:

Details of personal data collected by the employer.

Maintenance and accuracy of employee records.

Security of data.

External data processing.

Data collection and processing relating to benefits schemes.

Equal Opportunities monitoring.

Employee reviews & appraisals.

Data transfers outside the European Economic Area.

Data access & disclosure.

References.

External requests for disclosure of data.

Disclosure to recognised trade unions.

Employee monitoring.

CCTV monitoring.

Medical testing of employees.

Retention of employee records.