The ICO exists to empower you through information.

Latest updates - last updated 12 December 2023

12 December 2023 - We have added the Keeping employment records and Recruitment and selection draft guidance, and removed The employment practices code, The employment practices code supplementary guidance and the Quick guide to the employment practices code, which were previously in the Previous guidance section.

 

The guidance on this page is suitable for all organisations. However, small businesses may wish to also use the resources on our small business web hub.

Guidance

Information about workers’ health

Guidance on data protection considerations when handing workers’ health information, including practical advice on handling sickness and injury records, occupational health schemes, medical examinations and testing, genetic testing, health monitoring and sharing workers' information.

Monitoring workers

Guidance on monitoring of workers by employers and how this interacts with data protection, including monitoring tools, specific data protection considerations and use of biometric data.

Draft guidance - currently out for consultation

Keeping employment records

Guidance on lawfully processing workers' personal information, workers' rights to access their employment records and responsibility for records in your organisation.

Recruitment and selection

Guidance on data protection compliance during recruitment, including automated decision-making and profiling, verifying candidate information and keeping recruitment records.

Resources

Subject access request Q and As for employers

Answers to key questions on the right of access for employers, including what is the right of access, do people have to submit the request in a certain format, and whether you can clarify the request.

Information about workers’ health checklists

Checklists for employers using workers’ health information.

Monitoring workers checklists

Checklists for employers monitoring workers.

Working from home

Guidance to help you remain compliant with data protection law when you have people working from home.

Further reading

 


Help us improve our website