ARTICLE
28 May 2019

Employee Information And Data Protection - Deadline Approaching (Guernsey)

W
Walkers

Contributor

We are a leading international law and professional services firm providing legal, corporate and fiduciary services to global corporations, financial institutions, capital market participants and investment fund managers. With a global presence spanning the Americas, Europe, the Middle East and Asia, we advise on the laws of Bermuda, the British Virgin Islands, the Cayman Islands, Guernsey, Ireland and Jersey. With over sixty years of looking at the world through the same commercial lens as our clients means we deliver focused, clear, precise advice to get the deal done. Clients trust us to help them make good business decisions, create commercially sound products and strategies, resolve disputes and cement deals that are profitable. From offices across geographies, we deliver business-critical advice and service in the same time zones as our clients, covering asset management, investment funds, corporate, M&A, dispute resolution, finance, insurance, fintech, private capital and trusts, regulatory and more
While most of Guernsey's new data protection law took effect last year, there were a few parts that that had a grace period until 25 May 2019.
Guernsey Employment and HR
Walkers are most popular:
  • within Accounting and Audit, Immigration and Insurance topic(s)

While most of Guernsey's new data protection law took effect last year, there were a few parts that that had a grace period until 25 May 2019. Vicky Pratt, of Walkers Employment team, sets out below the last headline points that HR professionals should keep in mind to make sure that the business stays on the right side of the data protection law.

  1. By 25 May 2019 make sure privacy notices have gone to all staff, not just new joiners.
  2. From 25 May 2019 nearly all consents given by employees under the old law will fall away and cannot be relied on. Instead the business must be able to point another ground that allows it to process employees' data (this should not be hard).
  3. By 25 May 2019 the employer must have completed data protection impact assessments for its use of employees' special category data and any other data protection impact assessments that are required because of the way the employer collects and/or uses staff data.
  4. If the employer is a joint-controller with another entity (possibly a group company) then by 25 May 2019 the joint controllers' respective obligations must be decided and recorded and the necessary notifications must have been sent to all staff.
  5. By 25 May 2019, make sure contracts with all processors are in place and those agreements include the statutory requirements.

For fuller information about staff data and the end of the data protection transitional period in Guernsey please click here.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

[View Source]

Mondaq uses cookies on this website. By using our website you agree to our use of cookies as set out in our Privacy Policy.

Learn More