eLearningClasses.com
Editorial & Advertiser Disclosure Global Banking And Finance Review is an independent publisher which offers News, information, Analysis, Opinion, Press Releases, Reviews, Research reports covering various economies, industries, products, services and companies. The content available on globalbankingandfinance.com is sourced by a mixture of different methods which is not limited to content produced and supplied by various staff writers, journalists, freelancers, individuals, organizations, companies, PR agencies Sponsored Posts etc. The information available on this website is purely for educational and informational purposes only. We cannot guarantee the accuracy or applicability of any of the information provided at globalbankingandfinance.com with respect to your individual or personal circumstances. Please seek professional advice from a qualified professional before making any financial decisions. Globalbankingandfinance.com also links to various third party websites and we cannot guarantee the accuracy or applicability of the information provided by third party websites. Links from various articles on our site to third party websites are a mixture of non-sponsored links and sponsored links. Only a very small fraction of the links which point to external websites are affiliate links. Some of the links which you may click on our website may link to various products and services from our partners who may compensate us if you buy a service or product or fill a form or install an app. This will not incur additional cost to you. A very few articles on our website are sponsored posts or paid advertorials. These are marked as sponsored posts at the bottom of each post. For avoidance of any doubts and to make it easier for you to differentiate sponsored or non-sponsored articles or links, you may consider all articles on our site or all links to external websites as sponsored . Please note that some of the services or products which we talk about carry a high level of risk and may not be suitable for everyone. These may be complex services or products and we request the readers to consider this purely from an educational standpoint. The information provided on this website is general in nature. Global Banking & Finance Review expressly disclaims any liability without any limitation which may arise directly or indirectly from the use of such information.

STEP BY STEP: HOW BUSINESSES SHOULD KEEP EMPLOYEE’S DATA AS PRIVATE AS POSSIBLE

For most businesses, handling an employee’s confidential data can present a number of challenges.

It is important to educate the team on the importance of handling data to ensure confidence to not have to face any of the legal implications of a data leak.

Here, Michelle Mellor, Managing Director at Personnel Checks, gives her top advice on how companies should handle confidential information in the best way possible.

How should a business keep DBS data private?

First and foremost, in line with the DBS code of practice, businesses need a formal written policy on the secure handling of any information provided.

Companies would usually request DBS checks for successful job applicants, at which point they must make the details of this policy available to the applicant in question.

The employer must handle all information provided to them by DBS in line with the obligations under Data Protection Act 1998.

What can a business do with DBS data?

To keep a record, businesses that receive DBS information can look:

  • The date of issue of a disclosure
  • The name of the subject
  • The type of disclosure requested
  • The position for which the disclosure was requested
  • The unique reference number of the disclosure
  • The details of the recruitment decision taken

What can’t a business do with DBS data?

A business cannot reproduce a DBS certificate or related information in such a way that it infers that it is a certificate issued by DBS.

Disclosure information should never be kept on an applicant’s personnel file and should be kept separately and securely, in a lockable, non-portable storage container with access strictly controlled and limited to those who are entitled to see it as part of their duties. 

How long are companies allowed to keep hold of DBS data?

Once a recruitment decision has been made, organisations should not keep disclosure information for any longer than is absolutely necessary. This is generally for a period of up to six months to allow for the consideration and resolution of any disputes or complaints.

How should they dispose of it?

Organisations should ensure that the information is destroyed via secure means, i.e. by shredding, pulping or burning.

Employee files should be kept in a secure, locked cabinet, and access should be restricted to trusted individuals. In line with regulations, DBS reports should be securely destroyed after six months.

What are employers legally allowed to do if they find criminal information on a DBS check?

The DBS code of practice states that employers must ensure that all applicants for relevant positions are notified in advance of the requirement for a disclosure.

Employers should also notify all applicants of the potential effect of a criminal record history on the recruitment and selection process and any recruitment decision. The content of the disclosure should be discussed with the applicant before withdrawing any offer of employment.

As outlined in the Recruitment of Ex-Offenders Act 1974:

“All employers must treat Disclosure and Barring Service (DBS) check applicants who have a criminal record fairly and not discriminate automatically because of a conviction or other information revealed.”

What should a company do with an employee who leaks DBS data?

A leak of any applicant’s personal information should mean disciplinary action against the employee responsible. This could even lead to the termination of that employee’s contract.

It is an employer’s responsibility to ensure all staff understand their responsibility when handling confidential data and the consequences they should expect if they breach guidelines.

Before any disciplinary action can begin, however, a full and proper investigation should take place to determine whether formal procedures are necessary.

Breach of confidentiality is gross misconduct, and the company in question must make a decision based on the severity of the breach.