Skip to main content

Personal data an employer can keep about an employee

Employers must keep their employees’ personal data safe, secure and up to date.

Employers can keep the following data about their employees without their permission:

  • name
  • address
  • date of birth
  • sex
  • education and qualifications
  • work experience
  • National Insurance number
  • tax code
  • emergency contact details
  • employment history with the organisation
  • employment terms and conditions (for example, pay, hours of work, holidays, benefits, absence)
  • any accidents connected with work
  • any training taken
  • any disciplinary action

Employers need their employees’ permission to keep certain types of ’sensitive’ data, including:

  • race and ethnicity
  • religion
  • political membership or opinions
  • trade union membership
  • genetics
  • biometrics, for example if your fingerprints are used for identification
  • health and medical conditions
  • sexual history or orientation

Employers must keep sensitive data more securely than other types of data.

What an employer should tell an employee

An employee has a right to be told:

  • what records are kept and how they’re used
  • the confidentiality of the records
  • how these records can help with their training and development at work

If an employee asks to find out what data is kept on them, the employer will have 30 days to provide a copy of the information.

An employer should not keep data any longer than is necessary and they must follow the rules on data protection.

  1. Step 1 Check that you’re taking on someone as an employee

    Follow these steps if you want to take on someone with the employment status of ‘employee’ for the first time.

    1. Check who counts as an employee

    The rules are different if you want to take on someone with another type of employment status, such as agency staff, freelancers, consultants and contractors.

    1. Check your responsibilities when you take on someone with a different employment status and contract type
  2. and Check you can afford to take on employees

  3. Step 2 Make your workplace safe and accessible for employees

  4. Step 3 Register as an employer and set up PAYE

    You need to register with HMRC so you can pay tax and national insurance for your employees.

    1. Register as an employer and set up PAYE
    2. Choose how to run payroll
    3. If you decide to run payroll yourself, choose payroll software
  5. Step 4 Check your responsibilities around workplace pensions

  6. Step 5 Get Employers' Liability insurance

  7. Step 6 Recruit and employ someone