General Data Protection Regulation (GDPR) laws went into effect on May 25, 2018. It is important for employers to understand the new European Union data protection law, as it has imposed new obligations in the collection and processing of personal data. Although consent remains a legitimate ground for processing both sensitive and non-sensitive data, the GDPR states that consent must be freely given, specific, informed and an unambiguous indication of the data subjects wishes represented by a clear affirmative action. It also must be obtained for specific purposes and, under new regulations, multiple consents from employees may be necessary.
Read more
