On 5 February 2025, the UK Information Commissioner's Office (ICO) released a guidance for employers on managing employment records in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act (DPA). The guidance outlines best practices for balancing operational needs with workers' privacy rights, including establishing a lawful basis for data processing, ensuring data security, and maintaining transparency with workers. It also addresses handling special category data and specific employment-related scenarios such as data sharing and corporate restructuring.
Original source