Obligations of Employees

Whether or not you are concerned about your own privacy (and you should be) you have legal and moral obligations regarding the privacy of other people. As an employee, your duties towards this fall into two categories: your own privacy, and the privacy of those whose personal details you handle. We will discuss both of these.

Obligations Regarding Your Own Privacy

If you don’t care about your own privacy, and don’t take any steps to protect it, then you are laying yourself open to abuse. Sooner or later you will be shocked to find out that someone has stolen your identity, taken out a second mortgage on your home, and disappeared with the money. Then you will wish you had taken precautions earlier.

Your first step is to minimise the amount of information you release. It cannot be stolen or abused if it is known only to you. Your employer needs a certain amount of data about you, but perhaps they do not really need everything they ask for.

Do they need your home phone number? Could you use a separate bank account with no overdraft facility to receive your monthly pay, transferring it immediately to your normal current account? This way, even if someone untrustworthy gets hold of the details, they will have only a minimal opportunity to steal any money.

A good way to safeguard your privacy is by keeping your business and private lives separate, for example by not using telephone or Internet banking from your desk at work.

Obligations Regarding the Privacy of Others

If you need to enter, process, refer to, modify or transfer details relating to living people as part of your job, then you need some degree of understanding of the Data Protection Act. If your employer hasn’t already provided you with training about the Act, then you should ask to attend a course. It is in their interests to ensure that all their workers are complying with the legislation, and a necessary part of this is training.

You have a fundamental right to privacy. So do the other employees whose records are used by human resources and payroll. So do customers whose data is entered and used by sales, marketing and other departments. You have a duty to look after other people’s personal information just as your peers in organisations you have dealings with have an obligation to do the same for yours.

Your responsibilities under the key principles of the Data Protection Act with respect to personal information are, broadly speaking, as follows:

  • to use it only for the specific purpose for which it was collected
  • to keep it confidential
  • to keep it no longer than necessary
  • to ensure it is not transferred outside the European Economic Area
  • to make sure it is adequately secured
  • to allow individuals access to details held about them
  • to ensure your organisation is registered with the Information Commissioner

If you abide by these principles, you will be complying with the legislation. This will defend you and your company against fines, and will protect the people you do business with. Your customers are one of your business’s greatest assets, so you have a duty to keep them happy so they remain loyal; this can be achieved in part by making sure you respect and honour their expectations of privacy.