Guide • Compliance • 16 min read
GDPR for HR: handling employee data correctly
如何在 GDPR 下合法处理员工个人数据——合法依据、保留、权利、安全与国际传输。
HR 数据是高风险数据
HR 职能处理的是任何组织中最敏感的一些个人数据：联系方式、薪资、银行信息、绩效记录、健康信息，以及有时的犯罪记录检查。根据《通用数据保护条例》（GDPR）及其国家实施版本——爱尔兰《数据保护法》2018 和英国 GDPR / 《数据保护法》2018——这些数据必须合法、公平且透明地处理。
Getting this right is both a legal duty and a trust issue. Employees are data subjects with enforceable rights, and the Data Protection Commission in Ireland (or the ICO in the UK) can investigate complaints and impose significant fines. Treat employee data with the same rigour you would customer data.
选择合法依据
Every processing activity needs a lawful basis. A common mistake is to rely on consent for the employment relationship. Because of the power imbalance between employer and employee, consent is rarely freely given and is therefore usually the wrong basis for core HR processing. More appropriate bases are typically the performance of the employment contract, compliance with a legal obligation (for example tax and revenue reporting), and legitimate interests.
特殊类别数据——包括用于病假或职业健康用途的健康信息——需要根据 Article 9 的额外条件，通常与就业、社会保障和社会保护法律有关。将每一种 HR 处理活动映射到其依据和条件，并记录理由。
Transparency and data-subject rights
Employees must be told, in clear language, what data you hold, why, how long you keep it and who you share it with. This is usually delivered through an employee privacy notice, distinct from your customer-facing privacy policy. Provide it at the point of hiring and keep it current.
Data subjects can exercise rights including access (the subject access request), rectification, erasure in some circumstances, restriction and objection. Have a documented process for responding within the statutory timescale (generally one month). HR is a frequent recipient of access requests, so plan for how you will locate and redact information held across systems.
保留、最小化与安全
不要比必要时间更久地保留数据。建立一个保留计划，同时反映法律要求（薪资和税务记录、工时记录、健康与安全文档）以及真实业务需要，并在这些期限之后删除或匿名化。只收集你实际使用的数据——数据最小化是一项原则，不是锦上添花。
Security is a legal requirement, not just good practice. Apply role-based access so that managers see only what they need, encrypt data in transit and at rest, and keep an audit trail of who accessed what. A reputable HRIS gives you granular permissions and access logging out of the box, which is far safer than scattering employee data across spreadsheets and shared drives.
国际传输与供应商
如果你的 HR 软件或薪资提供商将数据存储在欧洲经济区之外，你必须确保采用适当的传输机制——充分性决定、标准合同条款或同等保障。自 Brexit 以来，欧盟与英国之间的传输受英国充分性地位保护，但这应持续监测，因为它会接受审查。
Whenever you use a third party to process employee data, you need a written data-processing agreement setting out their obligations, and you should carry out due diligence on their security posture. Keep a record of your processors and where data is hosted so you can answer questions and respond to incidents quickly.
