Employmentbuddy - Your best buddy in human resources
Please Note
We are in the process of updating our guidance to reflect the GDPR and updated documents will be available shortly.

Access request checklist

1. Are you satisfied about the identity of the person making the request? If not, determine what additional information you require and request this promptly.

What is Personal Data?

The Data Protection Act 2018 (DPA) applies to ‘Personal Data’.

Letter instructing a private investigator

[TO BE PRINTED ON COMPANY NOTEPAPER] Dear sirs [name of employee] - Letter of Instruction We would like to instruct you to conduct covert surveillance in respect of our current employee, [name of

The Legal Principles

The Data Protection Act 2018 (DPA) sets out a number of core principles that Data Controllers and Data Processors must comply with when processing data. These are the main

Bring Your Own Device Policy

This policy covers the use of employees' own devices (e.g. smartphone, tablet, laptop) for company business.

Data Subject’s Rights

The Data Protection Act 2018 (DPA) sets out a number of core principles that Data Controllers and Data Processors must comply with when processing data. These are the main responsibilities

Monitoring Policy

Employees and other members of staff have legitimate expectations of a degree of privacy whilst at work. However, employee monitoring can sometimes be necessary and justified for:

Data Subject Access Requests

Data Subjects have a right to request access to their personal data which a data controller holds on them.

Telephone policy

This Policy covers the use of the Company’s telephone systems and mobile phones by employees for both business and some private purposes and the monitoring by the Company of such

International Transfers

The Data Protection Act 2018 (DPA) contains strict rules for transferring data to countries outside of the EU.



Page 2 of 3