FORTHCOMING CHANGES: The Information Commission’s Office (ICO) published draft guidance on recruitment and selection, which was open for consultation until 5 March 2024. That guidance remains under review due to the Data (Use and Access) Act 2025, see the ICO employment information page. For more information, see Practice Note: The UK GDPR and DPA 2018: key data protection issues for employment lawyers—Information Commission’s Office (ICO) guidance. This Practice Note will be updated to reflect the updated ICO guidance once it has been finalised. This Checklist provides an overview of the steps to take and issues to consider when recruiting an employee or worker, including data protection issues under Assimilated Regulation (EU) 2016/679, UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018), using a recruitment agency, pre-employment checks and registering for PAYE (income tax and National Insurance contributions). It also highlights relevant Practice Notes and Precedent materials. It is not aimed at clients but may be adapted for that audience. Responsibility for recruitment • If the employer does not have a dedicated personnel