The European Union (EU) data protection legislation sets strict limits on the collection and use of personal data. Each member state must also set up an independent national body responsible for the protection of this data.
If you process data on your employees, you are a 'data controller' under EU law.
Each member state has implemented the EU law into its own legislation, so there may be local variations. Therefore, you should check the specific situation in the member state concerned.
You can get advice on local laws from the Enterprise Europe Network (EEN). This is a network of business advice partner organisations across the EU. Find your nearest partner organisation.
Important: This information is still current but could change as a result of the withdrawal of the UK from the European Union. Any changes will be documented here. For more information, see Brexit support for employers.