Dealing with employee records when retention requirements are 3 or 7 years
How does a business that keeps records and wants its employees to be held accountable deal with employee records when some contracts have retention requirements of 3 or 7 years?
Assign topic to the user
You need to remember that Article 6 GDPR about the lawfulness of processing states that it is lawful to process data to fulfill a contractual obligation or a legal requirement. Therefore, if a contract or your national law requires you to keep records for 3 or 7 years, it will be considered perfectly compliant. You will write in your data processing registry (if you have one) or in your internal policy the data retention period for that category of personal data.
Here you can find more information:
- Article 6 GDPR: https://advisera.com/eugdpracademy/gdpr/lawfulness-of-processing/
- Is consent needed? Six legal bases to process data according to GDPR: https://advisera.com/eugdpracademy/knowledgebase/is-consent-needed-six-legal-bases-to-process-data-according-to-gdpr/
- How the GDPR could impact your HR department https://advisera.com/eugdpracademy/blog/2018/02/22/how-the-gdpr-could-impact-your-hr-department/
If you want to know more about GDPR compliance you can consider enrolling in this EU GDPR Foundations Course: https://advisera.com/training/eu-gdpr-foundations-course//
Comment as guest or Sign in
Oct 13, 2020