Data Protection
This section addresses the GDPR and broader data protection requirements for recruitment businesses.
- The REC also offers members a range of model documents and guides on data protection as well as additional resources.
Key legislation:
- The General Data Protection Regulations (“GDPR”)
The GDPR is an EU piece of legislation that came into force on 25 May 2018. The GDPR is enforced across the European Economic Area (a list of these countries can be found here).
- The Data Protection Act 2018 (“DPA”)
The DPA replaced the Data Protection Act 1998 and adopted the GDPR into UK law as well as creating frameworks for law enforcement processing and establishing exceptions to the requirements of the GDPR.
In this Legal Guide any reference to the “ICO” is a reference to the Information Commissioner’s Office, which is the UK supervisory body that is responsible for enforcing data protection laws.
In this Legal Guide any reference to the “Conduct Regulations” is a reference to the Conduct of Employment Agencies and Employment Businesses Regulations 2003.
The ICO has their own helpline: 03031231113
Disclaimer
This information is for guidance purposes only and should not be regarded as a substitute for taking legal advice. Please refer to the full terms and conditions on our website.