Article 88
Processing in the context of employment

Official
Texts
Guidelines
& Caselaw
Review of
EU Regulation
Review of
Nat. Regulation
Show the recitals of the Regulation related to article 88 keyboard_arrow_down Hide the recitals of the Regulation related to article 88 keyboard_arrow_up

(155) Member State law or collective agreements, including ‘works agreements’, may provide for specific rules on the processing of employees' personal data in the employment context, in particular for the conditions under which personal data in the employment context may be processed on the basis of the consent of the employee, the purposes of the recruitment, the performance of the contract of employment, including discharge of obligations laid down by law or by collective agreements, management, planning and organisation of work, equality and diversity in the workplace, health and safety at work, and for the purposes of the exercise and enjoyment, on an individual or collective basis, of rights and benefits related to employment, and for the purpose of the termination of the employment relationship.

There is no recital in the Directive related to article 88.

The GDPR

Article 88 of the Regulation allows Member States, either by law or through collective agreements, make adjustments to data protection rules for  employment relationship, including more precise rules for the protection of rights and freedoms.

These rules could be provide for processing to be limited purposes such as recruitment, performance of the employment contract, other obligations established by law or by collective agreements, management, planning and organization of labour, equality and diversity in the workplace, occupational health and safety, protection of property belonging to the employer or client, exercise and enjoyment of rights and benefits related to the employment, individually or collectively, as well as for the termination of the employment relationship.

Those rules must include suitable and specific measures to safeguard the data subject's human dignity, legitimate interests and fundamental rights, with particular regard to the transparency of processing, the transfer of personal data within a group of undertakings, or a group of enterprises engaged in a joint economic activity and monitoring systems at the work place (paragraph 2).

Initially, the second proposed version of the Regulation authorised the Member State to establish, by law, the conditions, in which the personal data relating to employment could be processed on the basis of the employee’s consent. This provision was deleted, as the G29 argued consent of an employee can be considered as expressed explicitly and freely as part of an employment contract characterized by a subordination link (Opinion 15/2011 of 13 July 2011 on the definition of consent, WP 187, p 15;. see also WP 48 on the processing of personal data in the employment context. WP 114 - Working document on a common interpretation of Article 26, paragraph 1 of Directive 95/46/EC of 24 October 1995, is also relevant).

Finally, Each Member State shall notify the Commission of those provisions adopted into its law no later than 2 years after the publication of the Regulation and, without delay, any subsequent amendment affecting them.

The Directive

The Directive did not contain any specific provision in the context of labour law.

Potential issues

The difficulty will doubtlessly arise from the divergences of the regime between the Member States and from a lack of harmonization, as the lowest severity to be applied in a matter could foster a social dumping phenomenon. Therefore, control is provided via the notifications to the Commission, which should help to avoid excessive disparities.

 

Regulation
1e 2e

Art. 88

1. Member States may, by law or by collective agreements, provide for more specific rules to ensure the protection of the rights and freedoms in respect of the processing of employees' personal data in the employment context, in particular for the purposes of the recruitment, the performance of the contract of employment, including discharge of obligations laid down by law or by collective agreements, management, planning and organisation of work, equality and diversity in the workplace, health and safety at work, protection of employer's or customer's property and for the purposes of the exercise and enjoyment, on an individual or collective basis, of rights and benefits related to employment, and for the purpose of the termination of the employment relationship.

2. Those rules shall include suitable and specific measures to safeguard the data subject's human dignity, legitimate interests and fundamental rights, with particular regard to the transparency of processing, the transfer of personal data within a group of undertakings, or a group of enterprises engaged in a joint economic activity and monitoring systems at the work place.

3. Each Member State shall notify to the Commission those provisions of its law which it adopts pursuant to paragraph 1, by 25 May 2018 and, without delay, any subsequent amendment affecting them.

1st proposal close

Art. 82

1. Within the limits of this Regulation, Member States may adopt by law specific rules regulating the processing of employees' personal data in the employment context, in particular for the purposes of the recruitment, the performance of the contract of employment, including discharge of obligations laid down by law or by collective agreements, management, planning and organisation of work, health and safety at work, and for the purposes of the exercise and enjoyment, on an individual or collective basis, of rights and benefits related to employment, and for the purpose of the termination of the employment relationship.

2. Each Member State shall notify to the Commission those provisions of its law which it adopts pursuant to paragraph 1, by the date specified in Article 91(2) at the latest and, without delay, any subsequent amendment affecting them.

3. The Commission shall be empowered to adopt delegated acts in accordance with Article 86 for the purpose of further specifying the criteria and requirements for the safeguards for the processing of personal data for the purposes referred to in paragraph 1.

2nd proposal close

Art. 82

1. Member States may by law or by collective agreements, provide for more specific rules to ensure the protection of the rights and freedoms in respect of the processing of employees' personal data in the employment context, in particular for the purposes of the recruitment, the performance of the contract of employment, including discharge of obligations laid down by law or by collective agreements, management, planning and organisation of work, equality and diversity in the workplace, health and safety at work, protection of employer’s or customer’s property and for the purposes of the exercise and enjoyment, on an individual or collective basis, of rights and benefits related to employment, and for the purpose of the termination of the employment relationship. (…)

2. Each Member State shall notify to the Commission those provisions of its law which it adopts pursuant to paragraph 1, by the date specified in Article 91(2) at the latest and, without delay, any subsequent amendment affecting them.

3. Member States may by law determine the conditions under which personal data in the employment context may be processed on the basis of the consent of the employee.

Directive close

No specific provision

close