The General Data Protection Regulation (GDPR) will come into effect on 25 May 2018, replacing the current data protection framework under the EU Data Protection Directive.
The GDPR is a harmonised data privacy law for the European Union. It aims to support and extend the data protection rights of individuals and to prevent the loss of personal data by improving data security for all residents of EU member states – regardless of where their data is processed. The United Kingdom’s decision to leave the EU will not affect the enforcement date or compliance by UK employers.
The new regulations will encompass what payroll data can be held, how it is utilised and processed and new access rights for employees including the right to be forgotten which will require a fundamental review of Payroll and HR data processes. With the introduction of this framework, it is apparent that the requirement for this change in process will be applicable for both activpayroll and our customers.
activpayroll are evaluating the implications of the GDPR and the overall impact on your payroll process including data scope, transfer, storage and control which may result in the implementation of further data governing policies, procedures and the outline of any associated technology solutions.
We look forward to continuing to support our customers with these forthcoming changes and will inform you in due course of any such variations to processes required as a result of the introduction of the GDPR.