to make the employer incapable of demonstrating that the application had been scrutinized fairly when assessing suitability for the job. There is a six month period in which an applicant might challenge an employer, so the GDPR allows employers to retain data for this period. There are other circumstances and the ICO website gives more information about these. After Brexit. What is the situation regarding the regulation’s status after the UK’s departure from the EU? Currently, the legislation is from the EU but the entire package will be imported into UK law. So it will still apply here after we leave the EU, subject to any amendments that may be made at any time in the future by Parliament. How does all this affect individuals? Are you a subject’ and therefore protected by the new ‘data rights the GDPR? Almost certainly. Being on the Electoral Register or holding a bank or building society account makes you a data subject. With the new regulation you are given new rights. These rights are designed to protect you against misuse of your personal data. You have a right: to be (transparency). The data controller must informed provide a Privacy Notice that includes contact details of the data controller and the purposes to which your data will be used etc. It should also outline the additional rights below. of you have a right to access the information access – they hold on you and they must not charge you for this. In most cases, this should be carried out within a month. to rectification if data is inaccurate or incomplete you – have a right for it to be changed. This should, in general,
to make the employer incapable of demonstrating that the application had been scrutinized fairly when assessing suitability for the job. There is a six month period in which an applicant might challenge an employer, so the GDPR allows employers to retain data for this period. There are other circumstances and the ICO website gives more information about these. After Brexit. What is the situation regarding the regulation’s status after the UK’s departure from the EU? Currently, the legislation is from the EU but the entire package will be imported into UK law. So it will still apply here after we leave the EU, subject to any amendments that may be made at any time in the future by Parliament. How does all this affect individuals? Are you a ‘data subject’ and therefore protected by the new rights the GDPR? Almost certainly. Being on the Electoral Register or holding a bank or building society account makes you a data subject. With the new regulation you are given new rights. These rights are designed to protect you against misuse of your personal data. You have a right: to be informed (transparency). The data controller must provide a Privacy Notice that includes contact details of the data controller and the purposes to which your data will be used etc. It should also outline the additional rights below. of access – you have a right to access the information they hold on you and they must not charge you for this. In most cases, this should be carried out within a month. to rectification – if data is inaccurate or incomplete you have a right for it to be changed. This should, in general,
roundup30_final.docx