This note considers the obligations of employers under the Data Protection Act 1998, focusing on how data must be processed throughout the employment relationship.
Note: On 25 May 2018, the EU General Data Protection Regulation took effect and the Data Protection Act 1998 was in large part repealed and replaced by the Data Protection Act 2018 (DPA 2018). For information on the obligations on employers under the new regime, see Practice note, The GDPR and Data Protection Act 2018: employer obligations.