GDPR (General Data Protection Regulation)
The EU data-protection law governing how organisations collect, store and use personal data, including employee data.
The General Data Protection Regulation is the EU's data-protection framework. It sets out how personal data must be handled — lawfully, fairly and transparently — and gives individuals rights over their information.
For HR, GDPR shapes almost everything involving people data: recruitment records, contracts, payroll, performance notes and monitoring. Employers need a lawful basis to process data and must keep it secure, accurate and no longer than necessary.
Employees have rights to access their data, request corrections and, in some cases, erasure. A compliant, well-secured HRIS makes meeting these obligations far more manageable.
