Mar 2019

18

GDPR, Payslips & the Cornucopia of sensitive employee payroll data

I know you've all been dying for another one so here it is; a brand spanking new GDPR blog! Well… if you’re like me then you cannot get enough of GDPR. For my birthday, my pals over at BrightPay got me an extra special GDPR gift in the form of two new Bureau features called ‘Client Payroll Entry’ and ‘Client Payroll Approval’.

So we all know how much of a nightmare it is inputting timesheet data from your clients into your payroll software. The back and forth, and the mistakes. Because if you duplicate the data, the margin for error is in turn doubled. Not only this but the payroll data is sent to the bureau in the form of emails, word documents, spreadsheets, sometimes even a phone call. We’ve talked before about emails and GDPR but in case you missed it, it’s better to avoid.

Emails are not the most secure channel, especially for the vast amount of sensitive employee data being transmitted. If you do use email to send clients payslips, it is strongly advisable to ensure payslips are encrypted and deleted from email servers once sent. And of course, you would need to ensure passwords are used on all payslips.

So what this new Payroll Entry Feature does is put the onus on the client to input their own payroll data into the secure employer dashboard, thus reducing the back and forth and making sure all that important data is sent through a secure portal. Once the payroll data has been submitted to the bureau, hey presto - the bureau has all of the accurate payroll information, ready to download to the payroll software.

Before, this would have had to be approved via email and then sent to the client who would send back what needed to be rectified and then back and forth, back and forth again. It’s a mess! But with the second new feature from BrightPay Connect is the Payroll Approval feature - the bureau sends the client a preview of payroll summary statement to the secure BrightPay Connect portal, the client reviews it, approves it and then *ping* the bureau has confirmation that the payroll is correct and everyone lives happily ever after.

With these new BrightPay Connect features the exchange of information is super secure; no one is getting in! The online portal is also protected by username and password with role and permission based access for each user. This is the stuff that GDPR dreams are made of as it places the responsibility of security into the hands of you, the people, who GDPR was made for.

If you want to get technical *puts on glasses and lab coat* - “The BrightPay Connect service is a web based application hosted on the Microsoft Azure platform. All data transmitted to and from the cloud service is secured using SSL over HTTPS. This includes data sent via web browsers and data sent from payroll applications”. - BrightPay Connect

Book your demo today at https://www.brightpay.co.uk/connect/

Related Articles: 

Posted byAoibheann ByrneinGDPR