Also included in Staff Handbook Free Samples PDF | Word Complies with the General Data Protection Regulation (GDPR) and incorporates the GDPR into UK law - the "UKGDPR" This Data Protection Policy sets out detailed provisions relating to the collection, use, storage and transmission of current and former employees' data gathered in the workplace. Clauses in this policy: Your Individual Rights The right to be informed The right of access The right to rectification The right to erase The right to restrict processing The right to data portability The right to object Rights in relation to automated decision-making and profiling GDPR Data Protection Principles Your Explicit Agreement & Consent Your Personal Data Maintaining Records Sickness & Health Records Data Security Data Breaches & Reporting External Data Processing Benefits Schemes Equal Opportunities Monitoring Employee Reviews & Appraisals Data Transfers Outside the UK Data Access & Disclosure References External Disclosure Requests Other Disclosures Trade Unions Employee Monitoring CCTV Monitoring Medical Testing Retention of Employee Records Criminal Liability Date of Implementation Questions Data Protection Impact Assessments (DPIAs) Data Protection Officer Alteration of this Policy Data Consent Letter - Providing Your Consent All organisations must have a comprehensive Data Protection Policy that follows the General Data Protection Regulation (GDPR), the UKGDPR and the Data Protection Act 2018 to ensure full compliance and avoid significant fines. Do You Need More?Included in our Staff Handbook product.