GDPR and the Impact on HR and People Managers – Data Retention Periods
The General Data Protection Regulation (“GDPR”) comes into force on 25 May 2018.
It is important for all employers to assess their data obligations and review the records they are retaining.
Employers, as data controllers, must be clear about the length of time for which pre-employment, employment records and post-employment records are being retained, and also, why that information is being retained.
What to consider when deciding on Retention Periods
When considering retention periods, employers should be guided by employment and other law and the statutory retention periods arising from these laws.
Limitation periods should also be taken into account.
The needs of the business must also be taken into account.
Of course, the GDPR principles in themselves should be taken into account.
Statutory Retention Periods for HR Data
There are various statutory requirements in terms of timeframes for the retention of HR records, for instance;
- Terms of employment: duration of employees employment )Terms of Employment (Information) Act, 1994) (see note below)
- Annual Leave and Public Holiday records: 3 years
- Carer’s Leave records: 8 years
- Parental Leave records and Force Majeure Leave records: 8 years (Parental Leave Acts, section 27)
- Hours Worked and related information such as breaks, annual leave and public: 3 years (The Organisation of Working Time Act, 1997, Section 25, and the Organisation of Working Time (Records) Prescribed Form and Exemptions, Regulations 2001
- Payslips: 3 years (National Minimum Wage Act, Section 22)
- Employment Permit records: 5 years of for the duration of the employment (whichever is the longer)
- Employment records of young persons under 18: 3 years
- Collective redundancy information: 3 years
- Taxation Records: 6 years ( Companies Acts and Taxes Consolidation Act)
- Accidents: 10 years from date of an accident (the Safety health and Welfare at Work (General Applications Regulation 1993, section 60)
You should ensure that you retain other relevant HR details for a period of a year in the event of a dispute and to defend any actions that may be taken by the employee against the employer in the employment forums such as the WRC.
The Statute of Limitations, 1957 provides for a limitation period of 6 years from the date of breach of contract. Therefore, contracts should be retained for a period of at least 6 years from the date of termination of the employment.
There is a two year limitation period on taking personal injuries claims.
In a situation where there was an accident or injury, employers are advised to keep the records for 10 years after the date of the accident.
If you do not have the data then you do not have the basis of a defence in the situation where a case is taken against you and a court will very likely take the position that you should have the records and will rule against you.
Pre-Employment Records – Applications and CVs etc.
The employer must also keep records on candidates who have applied for positions within the organisation, even where the applicants have not been successful in order to defend any potential claims for discrimination etc. The Data Protection Commissioner considers a retention period of 1 full year to be appropriate in situations like this.
In relation to retaining signed documents, it would be best to keep any original, signed documents on file as per the timeframes outlined above.
Data Retention Policy
There is need for a data retention policy and adherence to that policy in terms of the basis on which the employer is retaining records, the securing, accessing, and deleting records from storage in all forms.
How Can We Help
We provide employers with support and advice, by phone, email and face-to-face, for all employment law and HR matters.
More from CollierBroderick
Keep Me Updated
Want to stay updated and get insights on the latest developments?
“I would like to say that we are very pleased with both the quality of the finished handbook and the timelines and costings also the HR Co…
“The Employment Law Hotline is brilliant – I don’t know why every company doesn’t have it or rather how they manage without it!Exper…
“CollierBroderick Management Consultants designed, administered and managed a culture survey of 1,400 staff, analysed and reported on the re…
“I found the course very good and interesting. The trainer was very good and she really knew her employment law.”
“I am contacting you since I called our Manager yesterday who was very satisfied with the CV & Interview Skills Training. Please say thank y…
“Thank you for the training day. I have been on employment law training days before…and I have to say they did not compare to your course, i…
“CollierBroderick Management Consultants Limited has conducted two research projects for Forfás / Expert Group on Future Skills Needs. – The…
“The Personal Profile was a great way for our management team to really understand their individual strengths and weaknesses (as well as t…
“Thank you for arranging the Employment Law Q&A. In summation, it was great! Very useful and interesting. CollierBroderick did a good job.”
“Donal and myself really enjoyed the course.We have implemented a few hints given already on our everyday business and I have to say that …