The General Data Protection Regulations (GDPR) comes into force in May 2018. The changes to what data we hold and how must have a legitimate reason to the business.

Obtaining consent to hold personal data can no longer be obtained by a ‘catch all’ paragraph in a contract of employment. Businesses must ensure they have a greater understanding of what data is held, for what purpose and obtain express permission to do so.

If you are struggling to get to grips with this and would like some further advice please do not hesitate to contact me.