HR departments process candidate, employee, payroll and client data. They should map the data held, document purposes and lawful bases, apply retention rules, restrict access, control service providers and prepare procedures for rights requests and incidents.
HR review points
- Inventory candidate, employee and client data.
- Define purpose, legal basis and retention.
- Restrict access and document disclosures.
- Prepare rights-request and incident procedures.