Personal protection at work
General
The employer's registration of personal data on employees can be considered a normal part of his activities.
The employer may need to work with various information about employees, including:
ensuring the rights of staff,
meet statutory requirements,
ensure safety,
maintain efficiency in the workplace.
The purpose of registration and collection must be clear and must not exceed what is necessary. Employees must be informed about registration and receive education.
Information that the employer may collect and record
Examples of information that is generally considered normal and appropriate for employers to have:
Basic information about the staff: Name, ID number, address, telephone number and e-mail address
Information related to employment: Position, job description, company structure, pay, working hours and shift arrangements.
Job data and qualifications: CV, reviews, information on education, experience and competencies related to the job.
Pay and tax information: Pay, wage bills, tax receipts, pension fund payments and other payments related to employee benefits.
Absence registration: List of sick days, holidays and other leave absences.
Security and access information: Access to buildings or equipment and work related security information.
Information on performance and achievement: data from employee interviews, assessment of performance, rewards or reminders if applicable.
Health information: Only if it is necessary, such as information on sick leave or circumstances affecting employees’ work contribution in accordance with law.
Employer Responsibility
The employer shall inform the staff of the information collected and for what purpose. The information may only be used for the purpose for which it is collected and is considered necessary for the operation. The employer shall ensure the confidentiality and security of the information.
