At SER we are preparing for the upcoming changes which are due to happen when GDPR is introduced, 25th May 2018.
EU Parliament & Council approved the GDPR on the 14th April 2016 and will be enforced 25th May 2018. Non-compliant companies will be subject to heavy fines of either 4% global annual turnover or twenty million euros
It has been introduced to give everybody more control over how their personal information is processed. We now have to have permission to use personal information and this can be removed at any time by a candidate request.
Consent will be one of the lawful grounds for data processing.
A GDPR-compliant data sharing agreement will be used when sharing information with a third party such as umbrella companies.
It will affect EU based candidates, companies collecting data from EU candidates, organisations collecting or processing personal data of EU candidates. This includes our own staff, candidates for both temp & perm positions, clients and even potential clients.
'Personal data is any information (hard copies and soft copies) relating to an individual, whether it relates to his or her private, public or professional life. It can be anything from a name, address, medical information, phone number, posts on social media'. Personal data that is hidden via pseudonymisation may also be included, depending on whether it can be identified to a candidate. Pseudonymization is a procedure by which the most identifying fields within a data record are replaced by one or more artificial identifiers, or pseudonyms.
Personal data also includes all data that can be related to an individual, who can be identified by the information – either directly or in-directly.
It could also include piles of loose paper hanging around the office, which holds information that can be easily accessed.
BREXIT WILL NOT AFFECT ITS INTRODUCTION INTO THE UK
In preparation for the change we will be attending workshops and running in house training for all employees, to ensure that we are all ready for these changes.