Six months on from the GDPR, there are discrepancies between what employers should be doing to comply with data protection laws – and what they are doing in practice.

CIPHR found in their survey of HR professionals that a third of HR teams admit to breaching the General Data Protection Regulation (GDPR) by failing to delete personal data about employees, job applicants and leavers

Although a good number – although not all  (83%)  of HR professionals surveyed have set retention periods for employee, leaver and job candidate data, just 69% put their own policies into practice.

“HR Professionals need to focus on enforcing the policies they put in place. Not having a policy or having one and not putting it in place will not impress the ICO during an inspection.”

The survey also found that HR professionals had ignored the Information Commissioner’s Office (ICO) recommendation of enabling self-service access to data. Only one in three said they had enabled self-service access to personal data for employees in response to the GDPR, with that proportion falling dramatically for job applicants (7%) and former staff (4%).

Worryingly, only two-thirds of HR teams had requested consent from employees, leavers and applicants to hold their personal information.

Employers must actively consider the reasons they are using and storing personal information and take appropriate actions if the purpose is no longer relevant or permitted by the GDPR.”

You can read more about your obligations under the GDPR here

As employment law and HR specialists we know exactly what to do to keep make you compliant and keep you on the right side of the law.

FREE first advice

Have you ever wanted to just ask an expert employment law solicitor if they can help you, without worrying about what it may cost to contact them?

Get in touch

We’d like to talk to you to see what we can do to help, so please either call us anytime for free on 08000 614 631, email us or use the form below.

Together we can work out what your next steps might confidence, at no cost and with no obligation.


* indicates required
McCabe and Co Solicitors will use the information you provide on this form to be in touch with you and to provide updates and marketing. Please let us know all the ways you would like to hear from us:
You can change your mind at any time by clicking the unsubscribe link in the footer of any email you receive from us, or by contacting us at We will treat your information with respect. For more information about our privacy practices please visit our website. By clicking below, you agree that we may process your information in accordance with these terms.
We use Mailchimp as our marketing platform. By clicking below to subscribe, you acknowledge that your information will be transferred to Mailchimp for processing. Learn more about Mailchimp's privacy practices here.