Hi All Does anyone know where i might find some consent templates suitable for notifying staff of their rights under GDPR, and the company's requirements to store and process their data for normal business processes? i.e. paying them, next of kin, sick leave etc..
Consent is not appropriate in the workplace due to the imbalance of power between the employer and the employee. See the WP29 direction on consent. It is better to use either contract of employment or legitimate interest as a legal basis for processing. Consent can also be withdrawn at any time. So don't waste your money on consent forms. We use legitimate interest and we "consult" rather than obtain consent with the employee where appropriate.