Employee data protection
Employees enjoy various rights under the General Data Protection Regulation (GDPR) and national data protection law. Our lawyers explain how employers can best protect the rights of their workforce.
Control during remote processing on behalf of a controller
When employees of processors work remotely, the controller’s right to control is regularly torpedoed. We shed light on typical arguments of service providers and refute them.
Exposing phishing emails and avoiding data breaches
Phishing is one of the most widespread methods of illegally obtaining access data. We explain the best ways to protect your company and your employees.
CJEU declares parts of Germany´s BDSG invalid in terms of data protection for employees
In future, employers in Germany must use a legal basis directly from the GDPR to process their employees’ personal data.
Responsibility, liability, and delegability of data protection in the company
Who is liable for corporate data protection when responsibility is delegated to employees or external parties? Five important criteria at a glance!
GDPR-compliant monitoring of employees working from home or remotely
How to use monitoring technologies in a data protection compliant manner to minimise legal risks for your company, and maximise the productivity of your employees, when employees are working from home or remotely.
Compensation based on a wrongful transfer of data within a group of companies
A German Higher Labour Court confirms claim for damages of EUR 2,000, due to prohibited transfer of personal data within the group of companies.
The legality of processing employee vaccination data
To ensure workplace safety, employers are increasingly seeking to know the Covid-19 vaccination status of their employees. We explain whether it is permissible to process employee vaccination data and if so, under which circumstances.
External and internal publishing of employee data
Under what circumstances are employers entitled to share data of employees with other colleagues or the public, if at all? Two concise examples.
