GDPR for HR Professionals

Data protection might not feel like the most exciting part of HR, but in today’s workplace, it’s one of the most critical. Mishandling employee data can expose your organisation to fines, reputational damage, and even legal claims. For HR professionals, GDPR compliance isn’t optional. It’s an everyday responsibility.

GDPR for HR Professionals (3rd Edition) is a clear, practical guide to navigating the UK’s data protection regime in the HR context. Written by Daniel Barnett, a leading employment law barrister, and Emma Erskine-Fox, a partner specialising in data and AI at TLT, this book cuts through the jargon and explains exactly what HR needs to know to stay compliant.

This updated edition reflects the latest developments, including the Data (Use and Access) Act 2025, new ICO guidance, and the growing impact of AI and biometrics in the workplace. Whether you work in a large HR department or manage compliance in a small business, you’ll find step-by-step explanations, practical checklists, and real-world examples designed to make compliance straightforward.

Inside, you’ll learn:

• The key concepts and principles of the UK GDPR and how they apply to HR data.

• Which lawful bases employers can rely on for processing employee data (and why consent is rarely the right option).

• How to draft and deliver clear privacy notices for staff and candidates.

• The full range of employee rights as data subjects, including access requests, erasure, rectification, and restrictions on automated decision-making.

• Best practice for data sharing, including with suppliers, benefits providers, and when making international transfers.

• What you must know about employee monitoring, AI tools, and biometric data systems—and how to ensure their use is fair and proportionate.

• How to handle data breaches, retention periods, and audits, with templates for policies and internal processes.

The book also includes an HR GDPR Compliance Checklist (Appendix A), providing a simple way to confirm your organisation is meeting its obligations.

Whether you are new to HR or an experienced professional refreshing your knowledge, this guide gives you the confidence to handle employee data responsibly, lawfully, and effectively. With a growing emphasis on data protection at board level, this book ensures you are equipped not just to manage compliance, but to demonstrate it.