Podcast: Play in new window | Download (Duration: 12:26 — 11.4MB)
Subscribe: Apple Podcasts | Email | TuneIn | RSS
By Adam Turteltaub
adam.turteltaub@corporatecompliance.org
GDPR requires businesses to be transparent, fair, and proportionate in how they collect process and store personal data. Many in compliance and the business world fear, though, that it also severely hampers the way in which business can conduct internal investigations.
SCCE Vice President, Partner & Notary Public at the UK law firm Bristow’s Robert Bond, though, offers significant reassurances in this podcast. He shares that there are far too many myths about GDPR. Contrary to popular belief, GDPR does not necessarily trump other laws. It is also a myth, he reports, that employee rights under GDPR are absolute.
However, that doesn’t mean an employer can do what he or she wishes. Compliance teams need to be mindful of the lawful grounds for processing data, including consent and contractual necessity. In addition, there is a need to conduct a fair assessment of whether there is a legitimate interest in conducting the investigation, one that outweighs privacy rights. Be sure also, he warns, to document your decision making in each and every case.
And before you think, “Neither the company, nor the employee, are in Europe so we don’t have to worry about this,” don’t forget an increasing number of nations, and the State of California, are adopting GDPR-like laws.
Listen in to learn more about how you can conduct a fair investigation, without running afoul of GDPR.
This is very helpful. Thank you for clarifying the ‘myths’ !
Content distribution and disclosure of sensitive data among the workforce or employees it seems is NOT always the best idea or act to indulge in, since this could lead to leakages, exposure of the company to external attacks and eventually slow down operational activities. . Instead , compliance officers and executives should employ and adopt appropriate and secured methods to speed up operational processes such as focusing and concentrating on official and individual roles and responsibilities to achieve targeted objectives in the near and medium terms. Ongoing dialogue and discussions with partners and business associates could then spell out long term actions to be taken by the company.
Comments are closed.