As an employer, you have responsibilities to ensure your employees' personal details are respected and properly protected.

Our quick guide to the Employment Practices Code is ideal for small businesses and provides all the information you'll need to keep on the right side of the law and covers the following areas:

  • What the Data Protection Act means to an employer
  • Recruitment and selection
  • Employment records
  • Monitoring at work
  • Information about workers' health
  • What rights do workers have?

We also publish the following guides which cover the code in detail and provide answers to all the main questions you’re likely to ask:

Due to the size of the Employment Practices Code and Supplementary Guidance, they can often be slow to download, especially if you have a dial up connection. If you experience any problems, please email us at websitefeedback@ico.gsi.gov.uk and we will be happy to send you a hard copy.

We have produced specific guidance on employment for some data controllers:

Disclosure of employee information under TUPE

This guidance aims to explain what organisations need to do to comply with the Data Protection Act when providing information about their employees under the Transfer of Undertakings (Protection of Employment) Regulations 2006 (commonly known as TUPE).

Subject access and employment references

This guidance clarifies how the Data Protection Act applies to employment references. The recommendations also apply to other types of reference, such as those provided for educational purposes.

Monitoring under section 75 of the Northern Ireland Act 1998

This good practice note aims to make clear that the Data Protection Act 1998 allows monitoring under section 75 of the Northern Ireland Act 1998. It also aims to provide advice for public authorities that are required to carry out such monitoring.