Diversity monitoring and data protection
Published by a LexisNexis Risk & Compliance expert
Practice notesDiversity monitoring and data protection
Published by a LexisNexis Risk & Compliance expert
Practice notesThis Practice Note it is intended for commercial organisations in the UK and is not sector-specific. It explains the data protection implications of workforce diversity monitoring, including whether:
- •
you need consent from the individuals concerned
- •
you can fall outside the scope of the data protection regime by collecting data in an anonymised form
Most large commercial organisations collect workforce diversity data and monitor trends. Some organisations will also publish their diversity data on their intranet and possibly their external website. There may also be a sector-specific regulatory obligation to report on your diversity data, eg law firms must report their diversity data to the solicitors regulation authority.
Why is data protection relevant to diversity monitoring?
The UK General Data Protection Regulation (UK GDPR) applies wherever you process personal data. For a definition of personal data, see below: Anonymising diversity data.
The type of data organisations collect when monitoring diversity is very likely to constitute special category personal data under the UK GDPR. There are four main types of special category data:
- •
personal data
To view the latest version of this document and thousands of others like it,
sign-in with LexisNexis or register for a free trial.