The guidance on this page is suitable for all organisations. However, small businesses may wish to also use the resources on our small business web hub.
Guidance
Information about workers’ health
Guidance on data protection considerations when handing workers’ health information, including practical advice on handling sickness and injury records, occupational health schemes, medical examinations and testing, genetic testing, health monitoring and sharing workers' information.
Monitoring workers
Guidance on monitoring of workers by employers and how this interacts with data protection, including monitoring tools, specific data protection considerations and use of biometric data.
Resources
Subject access request Q and As for employers
Answers to key questions on the right of access for employers, including what is the right of access, do people have to submit the request in a certain format, and whether you can clarify the request.
Information about workers’ health checklists
Checklists for employers using workers’ health information.
Monitoring workers checklists
Checklists for employers monitoring workers.
Working from home
Guidance to help you remain compliant with data protection law when you have people working from home.
Previous guidance
The following guidance was produced under the previous data protection law. We are in the process of replacing it, but in the meantime we still consider the information useful.
The employment practices code
Guidance on the impact of data protection laws on employment practices, including recruitment and selection, employment records, monitoring at work and information about workers’ health. Please note: This information has not been updated since the Data Protection Act 2018 became law, but we still consider the information useful.
The employment practices code supplementary guidance
This guidance supplements the main employment practices code of practice by giving additional information about issues covered in the code. Please note: This information has not been updated since the Data Protection Act 2018 became law, but we still consider the information useful
Quick guide to the employment practices code
This guidance has been produced with the needs of small businesses in mind. It is designed to help them comply with the Data Protection Act 1998 when recruiting and employing workers. It is based on the Information Commissioner’s ‘Employment practices code’. Please note: This information has not been updated since the Data Protection Act 2018 became law, but we still consider the information useful.