This is made up of four different parts – recruitment and selection, employment records, monitoring at work and information about workers' health.
EU legislation took effect from May 2018. This is a complex new set of regulations which required a complete overhaul of how businesses manage personal data, including that of their employees. The Employment Practices Code has not yet been rewritten by the ICO to comply with GDPR. For more information on this, please see our guide to monitoring staff.