The Data Commissioner has a wide range of enforcement powers to assist him in ensuring that the principles of data protection are being observed. These powers include the serving of legal notices compelling data controllers to provide information needed to assist his enquiries. He may investigate complaints made by the general public and authorise officers to enter premises and to inspect the type of personal information kept, how it is processed and the security measures in place. A data controller found guilty of an offence under the Acts can be fined amounts up to €100,000.
Employee data needs to be relevant for the purpose of collection, accurate to avoid making decisions based on incomplete or inaccurate information, up to date so as to be relevant. It must be secure and accessible only to individuals that are authorised and necessary. These are just some of the basic requirements for data collection and storage. The HR hub provides a comprehensive review of your systems and procedures.