Literature · Journal of Data Protection Privacy EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

The impact of the GDPR on background screening in the UK

Emma Butler, Kerstin Bagus, Andy Hellman — Journal of Data Protection Privacy

Emma Butler, Kerstin Bagus, Andy Hellman — Journal of Data Protection Privacy

Journal of Data Protection Privacy
DOI
Criminal Data Storage Limitation Legitimate Interest Personal Data DPIA
Feb 1, 2018 Source doi.org

Full text

This paper seeks to focus on the practical implications of General Data Protection Regulation (GDPR) compliance for employers who conduct pre-employment vetting. While it is primarily focused on the employer, it does also give mention to the vetting companies themselves. The focus is on the main areas of impact of the GDPR and is not an exhaustive analysis of the topic. These include: (1) lawful basis for processing; (2) the use of criminal record checks; (3) contracts and legal obligations of employers; (4) data subject (candidate) rights; and (5) data retention. Particular focus is given to material changes from the existing Data Protection Directive to GDPR and how employers and vetting companies may need to adapt their existing processes and procedures to maintain compliance.

How it connects

Related across sources

C-740/22 Endemol Shine Finland Oy In Case C-740/22, the Court of Justice of the European Union (Sixth Chamber) ruled on a preliminary reference from the Itä-Suomen hovioikeus (Court of Appeal, Eastern Finland)… CJEU ·Sixth Chamber Mar 7, 2024 Criminal Data Personal Data Material scope (GDPR)
C-77/21 Digi Távközlési és Szolgáltató Kft. v Nemzeti Adatvédelmi és Információszabadság Hatóság In this preliminary ruling, the CJEU interpreted Articles 5(1)(b) and 5(1)(e) GDPR in proceedings between Digi Távközlési és Szolgáltató Kft. and the Hungarian National Authority… CJEU ·First Chamber Oct 20, 2022 Retention Period Storage Limitation Personal Data
C-60/22 UZ v Bundesrepublik Deutschland In Case C-60/22, the CJEU (Fifth Chamber) ruled on a preliminary reference from the Verwaltungsgericht Wiesbaden concerning UZ, a third-country national, and the Bundesrepublik… CJEU ·Fifth Chamber May 4, 2023 Right to Restriction Controllers Personal Data
C-175/20 SIA 'SS' v Valsts ieņēmumu dienests In Case C-175/20, the Court of Justice of the EU interpreted GDPR Articles 5 and 6 in response to a preliminary ruling from the Latvian Regional Administrative Court concerning a… CJEU ·Fifth Chamber Feb 24, 2022 Retention Period Personal Data Integrity and Confidentiality Principle
Guidelines 3/2019 processing of personal data through video devices Guidelines ·EDPB Jan 30, 2020 Personal Data Material scope (GDPR) Legitimate Interest
C-136/17 GC and Others v CNIL C-136/17 (GC and Others) CJEU Sep 24, 2019 Right to be Forgotten Child Consent Right to Object
Related documents