Staff data protection policy

Document overview
The General Data Protection Regulation requires you to tell all people whose personal data you process about how you use that data. Those data subjects include your employees and contractors.
This notice allows you to comply with the law by notifying employees of what data you process, what basis you do this on, and employee rights to see that data and keep it updated.
Your edited version of this document could either be provided to employees with a copy of an employment contract or contract for services, or published on a company intranet.
We provide this document for download and use completely free of charge.

England & Wales
Scotland

- Length:6 pages (1600 words)
- Available in:
Microsoft Word DOCX
Apple Pages
RTF

If the document isn’t right for your circumstances for any reason, just tell us and we’ll refund you in full immediately.

We avoid legal terminology unless necessary. Plain English makes our documents easy to understand, easy to edit and more likely to be accepted.

You don’t need legal knowledge to use our documents. We explain what to edit and how in the guidance notes included at the end of the document.

Email us with questions about editing your document. Use our Lawyer Assist service if you’d like our legal team to check your document will do as you intend.

Our documents comply with the latest relevant law. Our lawyers regularly review how new law affects each document in our library.
About this notice
This employee data protection policy is an internal HR document for use by employers and staff. It complements your website privacy policy, which is written for customers, as a document written for employees and contractors.
The policy is suitable for any business or organisation.
The policy covers what data is collected, under what legal grounds it is stored and used (contractual for current and prospective staff, and because of one or more legal obligations for previous employees), and what rights data subjects have with respect to their data used by you.
Note that this document is not a policy for how data within an organisation should be handled, for example, that certain types of data should be stored encrypted. Such a policy could differ so much between organisations (or even departments within the same organisation), that producing a one-size-fits-all template is very difficult.
Free to use
We provide this template completely free of charge.
We don't ask you to acknowledge our copyright in it or mention us in any way within it.
Contents
The contents of the document cover:
- Data processed
- Legal basis under which it is processed
- Rights to access and removal

Recent reviews
A top resource for anyone faced with contemplating the writing and distribution of a legal document. Net Lawman take the pain out of every part of the process. I thoroughly recommend them.
Their services give you the confidence to know that your documents are correct and compliant.
My only tiny comment would be in relation to the comments which are at the back. You either need to keep scrolling to the end or copy and paste another document so that you can see the actual text you're working on and all the useful comments side by side.
All rights reserved