Data protection

Which employee data may be processed, and for what purpose? Who may access information, and when must it be deleted? These questions arise in HR and IT systems just as they do in meeting documents, individual personnel measures and confidential concerns raised by employees.

Our certified data protection specialists explain the legal foundations and practical approaches. Your council learns to assess data protection issues in the workplace and organise its own handling of personal data.

Understanding and applying employee data protection

We work through the fundamentals of the General Data Protection Regulation (GDPR) and employee data protection. This covers legal bases, purpose limitation, necessity and retention periods, as well as transparency and employees’ data protection rights. We also address the special protection of sensitive information, such as health data.Using examples from HR administration, time recording and digital work tools, we examine which data are processed, who has access and what analyses are used for. We also consider cloud services, external service providers and access control arrangements. Your council learns to make targeted requests for information and address data protection when developing workplace rules.

Organising data protection in the works council office

Which data does your council need to fulfil its duties? How are meeting papers, minutes and information about individual employees filed, shared and retained? We explore suitable approaches to paper and digital records, email communication, shared drives and mobile devices.

Our focus is on access permissions, confidentiality, retention and deletion rules, and secure handovers when council membership changes. We also consider cooperation with committees and substitute members, and the protection of particularly sensitive documents.

Clarifying roles, duties and cooperation

We cover your council’s data protection obligations under Sec. 79a of the Works Constitution Act (WCA), and the roles of the employer, works council and the organisation’s data protection officer. This includes cooperation in handling data subject access requests, responding to possible data breaches and protecting the confidentiality of your council’s internal deliberations.

Training exclusively for your council

We offer this topic as in-house training or as a private course for an individual council. The content and depth are tailored to your council’s existing knowledge, questions and working methods. Your specific concerns provide the starting point for practical examples and exercises. This helps your council develop practical approaches to handling employee data securely and transparently, both in the workplace and in its own work.