Data protection and employee information

STOP PRESS: The Data (Use and Access) Act 2025 (Commencement No 6 and Transitional and Saving Provisions) Regulations 2026, SI 2026/82 bring into force the remaining provisions of the Data (Use and Access) Act 2025 (DUAA 2025). Provisions relating to subject access requests, legitimate interests, purpose limitation, automated decision-making, international transfers and enforcement are in force from 5 February 2026, and provisions relating to penalty notices and complaints are in force from 19 June 2026. For more information, see Practice Note: Data (Use and Access) Act 2025—employment implications. This Practice Note will be updated shortly to take account of these changes.

The material is this subtopic primarily considers the UK GDPR regime, and legislative links are to Assimilated Regulation (EU) 2016/679, UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018), except where expressly stated otherwise.

For a more detailed introduction to UK GDPR generally, see Practice Notes: The UK General Data Protection Regulation (UK GDPR) and The UK General Data Protection Regulation (UK GDPR)—Navigator.

AI in the workplace

Practice Note:

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

Powered by Lexis+®
Latest Employment News
View Employment by content type :

Popular documents