Employment Practices Code - ICO

computer in the employment context, will fall within the scope of ... a supervisor's notebook containing information on a worker where ... 10 About the code.
711KB Sizes 4 Downloads 256 Views
Data protection

The employment practices code

Contents 3

Contents

About the code

4

Managing data protection

11

Good practice recommendations

11

2.13 Discipline, grievance and dismissal

54

2.14

Outsourcing data processing

55

2.15

Retention of records

56

Part 3: Monitoring at work

58

Part 1: Recruitment and selection

14

About Part 3 of the code

58

About Part 1 of the code

14

Good practice recommendations

65

Good practice recommendations

16

3.1 The general approach to monitoring

65

1.1

Advertising

16

3.2 Monitoring electronic communications 69

1.2

Applications

16

3.3

Video and audio monitoring

73

1.3

Verification

20

3.4

Covert monitoring

74

1.4

Short-listing

21

3.5

In-vehicle monitoring

76

1.5

Interviews

22

1.6

Pre-employment vetting

23

3.6 Monitoring through information from third parties

76

1.7

Retention of recruitment records

25

Part 4: Information about workers’ health

79

About Part 4 of the code

79

Good practice recommendations

85

4.1 Information about workers’ health

85

4.2

88

Part 2: Employment records

28

About Part 2 of the code

28

Good practice recommendations

31

2.1  Collecting and keeping general records32 2.2

Security

34

2.3

Sickness and injury records

36

2.4

Pension and insurance schemes

38

2.5

Equal opportunities monitoring

40

2.6

Marketing

41

2.7

Fraud detection

42

2.8  Workers’ access to information about themselves

43

2.9

References

46

2.10

Disclosure requests

47

2.11

Publication and other disclosures

50

2.12 Merger, aquisition, and business re-organisation52

Occupational health schemes

4.3 Information from medical examination and testing

89

4.4 Information from drug and alcohol testing

92

4.5

94

Information from generic testing

4 About the code

About the code

Our aim This code is intended to help employers comply with the Data Protection Act and to encourage them to adopt good practice. The code aims to strike a balance between the legitimate expectations of workers that personal information about them will be handled properly and the legitimate interests of employers in deciding how best, within the law, to run their own businesses. It does not impose new legal obligations. Who is the code for? The Employment Practices Data Protection code deals with the impact of data protection laws on the employment relationship. It covers such issues as the obtaining of information about workers, the retention of records, access to records and disclosure of them. Not every aspect of the code wil