Data Protection & HR GDPR
Practical support for handling employee and candidate information responsibly.
I support employers with the people-management side of privacy and data governance: recruitment records, personnel information, occupational health details, investigation documents and HR policies. I bring hands-on HR systems and governance experience, and work alongside qualified legal, DPO or cybersecurity specialists where a matter falls outside HR consultancy.
Enquire about this service ↗
Explore the areas of support
Select any topic below to expand the full service description and see the practical help available.
01HR data protection reviews
I can review how information is gathered, accessed, used, shared and retained across the employee lifecycle, identifying practical improvements to policies and everyday processes.
How I can help
- Map key HR data flows
- Review access, sharing and retention practices
- Spot gaps in transparency and governance
- Create a proportionate improvement plan
02Employee privacy notices
I help organisations prepare the HR information needed for clear employee-facing notices, including purposes, categories of records, retention criteria and data-sharing arrangements.
How I can help
- Employee data categories and uses
- Recruitment-to-exit lifecycle review
- Service provider information
- Notices for review by relevant specialists
03Recruitment candidate privacy
Recruitment data needs particular care because applicants often share detailed work histories and other personal information. I help organisations establish clear, consistent handling practices.
How I can help
- Candidate CV and application controls
- Transparent information to applicants
- Sharing with hiring organisations
- Appropriate retention and deletion criteria
04Special-category and sensitive HR information
I support careful processes for medical, occupational health and equality monitoring records, recognising additional legal conditions and the need for restricted access.
How I can help
- Role-based access considerations
- Appropriate confidentiality rules
- Reasonable adjustment information handling
- Policies for sensitive records
05Retention schedules and secure disposal
I can help establish logical retention criteria so employee and applicant records are kept only while needed and deleted or anonymised appropriately.
How I can help
- HR record inventory
- Defined retention categories
- Archive and deletion procedures
- Documented exception and legal-hold process
06Subject access request coordination
Where an employee or former employee asks for personal data, I can help an employer identify the HR systems and case records involved, organise relevant information and coordinate with specialist advisers.
How I can help
- HR record searches and inventories
- Document review coordination
- Stakeholder and deadline tracking
- Sensitive case-file handling
07HR data incidents and breaches
I can help put in place internal escalation and documentation steps so suspected disclosure or loss of HR information is recognised promptly and referred to the relevant decision-maker.
How I can help
- Incident reporting pathways
- Containment and information gathering
- Record keeping and lessons learned
- Referral to DPO, legal or technical specialists
08Confidentiality in employee relations
Employee relations case files can include allegations, witness accounts and medical details. I can help build consistent access, storage and sharing procedures.
How I can help
- Investigation file handling
- Confidential interview notes
- Information sharing controls
- Case closure and retention procedures
09HR systems and permissions
I review how people data is recorded and managed within HR systems, including the relevance of access permissions, data quality and documented processes.
How I can help
- User access reviews
- Record accuracy and integrity
- Administrative controls
- Process documentation
10HR suppliers and information sharing
Payroll, occupational health, recruitment and other providers may handle staff data. I can help employers map arrangements for specialist review and clarify operational responsibilities.
How I can help
- Third-party data flow mapping
- Operational contract and process questions
- Documented sharing procedures
- Appropriate specialist escalation
11Privacy training for managers
Managers need practical knowledge of confidentiality and responsible records handling. I offer workshops grounded in real HR scenarios rather than only legislation.
How I can help
- Employee information essentials
- Recruitment records and references
- Absence, health and investigation notes
- Managing access and suspected incidents
12Working within the right professional boundaries
I provide HR data governance and process support. Formal legal opinions, specialist DPO appointments, security engineering and technical penetration testing are not presented as part of this service.
How I can help
- Clear project scope and accountability
- Coordination with a client’s DPO
- Specialist legal referrals where required
- Actionable HR process and documentation support
Experienced advice, with practical outcomes.
I'll work to understand what matters to your organisation, communicate clearly and give you support that is relevant, proportionate and focused on implementation.
- Direct contact with an experienced Chartered HR professional
- A clear scope of work and agreed next steps
- Careful handling of sensitive information
- Practical guidance, documentation and manager support
Could I help your business with this?
Tell me what you need. I’ll reply personally to discuss the next steps.