The European Union (EU) data protection legislation sets strict limits on the collection and use of personal data. Each member state must also set up an independent national body responsible for the protection of this data.
If you process data on your employees, you are a 'data controller' under EU law.
Each member state has implemented the EU law into its own legislation, so there may be local variations. Therefore, you should check the specific situation in the member state concerned.
You can get advice on local laws from the Enterprise Europe Network (EEN). This is a network of business advice partner organisations across the EU. Find your nearest partner organisation.
Important: The UK has left the EU and there is now a transition period until the end of 2020. This information is still current but could change. Any changes will be documented here. For more information, see Brexit support for employers.