Is consent the best approach to processing employee data?

Inevitably, employers are required to process the personal data of their employees during the employment relationship. The Data Protection Act 1998 (DPA) provides that personal data must not be processed unless at least one of the conditions in Schedule 2 of the DPA is met.

The Schedule 2 conditions which are most likely to apply in an employment context include: where the data subject has given his or her consent to processing; where processing is necessary for the performance of the employment contract; where processing is necessary for compliance with any legal obligation (other than an obligation imposed by contract); and where processing is necessary in order to protect the vital interests of the data subject.

Many aspects of processing employee data do not require specific consent and fall within another Schedule 2 condition. For example, providing information to HMRC to enable salaries to be paid via payroll is likely to be necessary for the performance of the employment contract…

If you are registered and logged in to the site, click on the link below to read the rest of the Taylor Wessing briefing. If not, please register or sign in with your details below.

Briefings from Taylor Wessing

View more briefings from Taylor Wessing

Analysis from The Lawyer

  • merger deal

    Corporate crunch time: who will triumph at The Lawyer Awards 2014?

    As the equity capital markets rocketed back into favour and global M&A saw at least a partial return to form, there have been some rich pickings for The Lawyer’s Corporate Team of the Year award shortlisted firms in 2014. 

  • singapore orchid

    Singapore: Cash course

    The city-state is working hard to become a global wealth management hub, and law firms are gearing up for a prosperous new world

View more analysis from The Lawyer


5 New Street Square

Turnover (£m): 228.00
No. of lawyers: 860
Jurisdiction: UK
No. of offices: 4
No. of qualified lawyers: 67 (International 50)