Data Privacy for Employers

Subject Access Requests

Individual requests (all aspects of the request process – receipt, extensions, grounds for non-compliance, document search, review and redact, application of exemptions, responses

Sensitive Personal Information

Lawful use in an HR context (such as ill-health absence, occupational health issues, reasonable adjustments and equality of opportunity monitoring) and related regulatory requirements.

Surveillance

Ranging from general (for example, advising on the lawful use of workplace CCTV) to more targeted or covert (for example, monitoring communications in cases of serious misconduct).

Bespoke

Data privacy law advice across the entire lifecycle of the employment relationship.

Multiple SARs

Preparation and guidance for multiple simultaneous requests (for example in response to organisational redundancies.

Contracts

Advising on data privacy law risks arising from contracts with individuals and organisations.

Vicarious Liability

Assisting clients to take both preparatory and reactive actions to mitigate and defend risks/allegations of vicarious liability for the consequences of breaches of data privacy law caused by human error.

SARs & Tribunals

In the context of grievances, disputes and tribunal litigation

Compliance Documentation

For example, staff privacy notices, organisational data protection policies and data retention guidelines.