Electronic workplace

There are regulatory requirements relating to how your firm and staff use the internet (including AI) and other forms of electronic communication, eg emails and telephone.

Data protection issues

Assimilated Regulation (EU) 2016/679, the UK General Data Protection Regulation (UK GDPR) governs the processing of personal data in the UK.

The UK GDPR applies where:

  1. you collect personal data about clients and other third parties via the internet or your electronic communications system

  2. you generate or collect personal data in the course of monitoring your staff's use of the internet or your electronic communications system

The UK GDPR imposes obligations including:

  1. informing individuals that personal data relating to them is being gathered via monitoring of IT and communications systems and the reasons for this—there are limited exceptions, eg where informing an individual would prejudice a criminal investigation

  2. ensuring personal data gathered through monitoring is not excessive or disproportionate

  3. ensuring

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

Powered by Lexis+®
Latest Practice Compliance News
View Practice Compliance by content type :

Popular documents