Aug 2018
3
GDPR - What is the right to rectification?
Under Article 16 of the GDPR, individuals have the right to rectify data that is inaccurate about them. An individual may also be able to have incomplete personal data completed. Although you may have already taken steps to ensure that the personal data was accurate when you first obtained it, this right imposes a specific obligation to reconsider the accuracy upon request.
What do we need to do?
If you receive a request from an individual to rectify their personal data, you should take reasonable steps to ensure that the data is accurate and rectified if necessary. The reasonable steps taken will depend on the nature of the personal data and what it will be used for. The more important the personal data is to be accurate, the greater the effort you should put into ensuring it’s accurate and if not, taking steps to rectify it.
When is data inaccurate?
The GDPR does not give a definition of the term accuracy. However, it states that personal data is inaccurate if it is incorrect or misleading in any way. It is the data controller's responsibility to ensure the personal data they manage is accurate and up-to-date.
Can we refuse to comply with the request for rectification for other reasons?
You can refuse to comply with a request for rectification if the request is excessive or manifestly unfounded, taking into account whether the request is repetitive in nature. There are two things you can do if you consider that a request is excessive or manifestly unfounded:
1. Request a “reasonable fee” to deal with the request
2. Refuse to deal with the request
You will need to justify your decision in either case. The reasonable fee should be based on the administrative costs of complying with the request. If you decide to charge a fee, it is advised that you contact the individual within one month. You do not need to comply with the request until you have received the fee.
In most cases, you cannot charge a fee to comply with a request for rectification. However, as noted above, if the request has been excessive or manifestly unfounded you may charge a reasonable fee to cover the administrative costs.
Related Articles:
HMRC and GDPR - Holding and using your personal information
GDPR to affect your employee payroll processing!
GDPR - Everything you need to know!
Are you missing out on our newsletter? We will not be able to email you without you subscribing to our mailing list. You will be able to unsubscribe at any time. Don’t miss out - subscribe today!
Jul 2018
2
GDPR & Payroll Processing: Do I need consent from my client’s employees?
Businesses must provide their employees with information on what happens to their data, for example sharing employee’s personal data with a payroll bureau who processes the payroll. Employee personal data can be stored and managed by a payroll bureau, bookkeeper or accountant for the sole benefit of correctly paying their wages, paying the correct tax and providing a payslip. All of this legitimately falls under the remit of the GDPR legislation.
Employee Consent
Many bureaus have expressed concern and confusion in relation to getting consent from client’s employees and securely distributing payslips. Payroll bureaus do not need to seek consent from individual employees that the payroll is processed for. However, the employer will need to inform their employees that they are sharing their personal information with a third party.
An employee cannot withdraw their consent for their personal data to be used as part of the payroll processing. It should be noted that bureaus should keep only the personal data that is strictly required for the purpose of the payroll. This is referred to as data minimisation or privacy by default.
GDPR Webinars
BrightPay is running a free webinar to help you with what you need to know about GDPR. The webinar takes place on 3rd July at 11.00 am and is free to attend for payroll bureaus and employers.
This webinar will look at the biggest areas of concern including emailing payslips, employee consent and your legal obligation. We will also look at some important steps to achieve GDPR compliance.
Click here to book your place now.
Related articles:
- GDPR: Everything you need to know!
- Free GDPR Webinars for Employers
- Payroll Bureaus: Overcoming the GDPR Challenge
Jun 2018
5
Customer Update: June 2018
Free Webinar: Payroll Data & GDPR - What you need to know
Employers must take steps to protect and securely manage employees’ personal data to comply with GDPR. Equally, where a business outsources their payroll to a third party (payroll bureau), they are legally obliged to provide assurances to safeguard the payroll information they manage on behalf of their clients. Places are limited.
Auto Enrolment: The True Consequences of Non-Compliance
If an employer fails to comply with auto enrolment, the Pensions Regulator will take enforcement action. Although the rollout of auto enrolment began in 2012, it is now that the true consequences of non-compliance are coming to light.
How has BrightPay prepared for GDPR?
Data Protection has always been a concern for BrightPay and we have always aimed to act with complete integrity in this regard. In preparation for GDPR, we have had to complete a total review on how we gather, maintain and use data. We have taken steps to securely protect our customers information including increased encryption, securely deleting files from our servers and updating our privacy policies in line with GDPR.
Key changes | Updated privacy policy
GDPR - What to include in your template Data Processor Agreement
Whenever a data controller uses a data processor there needs to be a written contract in place. The contract is important so that both parties understand their responsibilities and liabilities. The GDPR sets out certain information which needs to be included in the contract.
Find out more | Template Data Processor Agreement
BrightPay Connect’s NEW Employee Smartphone App
BrightPay’s employee self-service smartphone and tablet app is available with our cloud add-on BrightPay Connect. The advancement of employee mobile apps offers many different advantages for employers, employees, and the business as a whole. For employers and HR Managers, the user-friendly portal will streamline payroll processing while reducing the number of payroll queries from employees.
How BrightPay Connect can help with GDPR!
Where possible, the data controller should offer self-service remote access to a secure system providing individuals with access to their personal data. BrightPay Connect is a self-service option which provides online access 24/7. Employees can view and download current and historic payslips, P45’s and P60’s. Annual leave can also be requested which flows through as a notification for the employer to approve. Employee contact information can be edited and updated, keeping records accurate at all times.For payroll bureaus, your clients can instantly access payslips, payroll reports, an employee leave calendar, and amounts due to HMRC.
Are you an employer who has to provide a pension?
If you are employing staff for the first time this year, it’s important to understand what to do and when, so you can meet your automatic enrolment duties on time. Your legal duties begin on the day your first member of staff starts work. This is known as your duties start date. Even if you think you won’t need to put staff into a scheme, you will still have duties.
Are you missing out on BrightPay's newsletter? We will not be able to email you without you subscribing to our mailing list. You will be able to unsubscribe at anytime. Don’t miss out - sign up to our newsletter today!
May 2018
24
Free Webinar - How will GDPR affect my payroll processing?
Payroll Data & GDPR - What you need to know about consent, emailing payslips, and your legal obligation.
Employers must take steps to protect and securely manage employee’s personal data to comply with GDPR. Equally, where a business outsources their payroll to a third party, they are legally obliged to provide assurances to safeguard the payroll information they manage on behalf of their clients.
Given recent cyber-attacks, an updated security process is definitely required to protect the personal data that we manage. GDPR is not a new concept, it is simply a data protection process that is being upgraded to protect all individuals. Essentially, GDPR is an overhaul of the way we process, manage and store individual’s personal data.
This free webinar will uncover the ins and outs of the impact of GDPR on your payroll processing, highlighting the biggest areas of concern including emailing payslips, employee consent and your legal obligation. Places are limited, book early to avoid disappointment.
We will walk you through some important steps to achieve GDPR compliance by examining the following topics:
What does GDPR mean for your payroll processing?
- Understanding GDPR
- The contract between accountants & clients
- Template Data Processor Agreement
- Proof of compliance
- Securely storing employee data
Payslips & GDPR Compliance
- Employee consent
- Emailing payslips
- Recommended self-service access
Breaching GDPR
- Data breach plan of action
- Non-compliance and penalties
BrightPay & GDPR
- BrightPay Connect - online self-service portal
- Enhanced security measures
BrightPay Newsletter - Are you missing out?
GDPR is changing how we communicate with you. After May 2018, we will not be able to email you about webinar events, special offers, legislation changes, other group products and payroll related news without you subscribing to our newsletter. You will be able to unsubscribe at any time. Don’t miss out - sign up to our newsletter today!
Related Articles:
Apr 2018
18
GDPR: Everything you need to know!
Free GDPR Webinars for Employers & Payroll Bureaus
Employers process large amounts of personal data, not least in relation to their customers and their own employees. Consequently, the GDPR will impact most if not all areas of the business and the impact it will have cannot be overstated. Join us for our free webinar where we will discuss what GDPR is, why employers need to take it seriously and how you can prepare for the 25th May deadline.
Employer Webinar | Bureau Webinar
How can BrightPay Connect help with GDPR?
Under the GDPR legislation, where possible the controller should be able to provide self-service remote access to a secure system which would provide the data subject with direct access to his or her personal data. BrightPay Connect is a self-service option which will give employees online remote access to view their payroll information 24/7.
Free Guide: GDPR & The Future of Payroll
The guide will uncover the ins and outs of the impact of GDPR on your payroll processing, highlighting the biggest areas of concern including emailing payslips, employee consent and your legal obligation.
Data Processor Agreement - Free Template
Whenever a data controller (e.g. a payroll bureau client) uses a data processor (e.g. payroll bureau) there needs to be a written contract in place. The contract is important so that both parties understand their responsibilities and liabilities. To assist our customers, we have created a template Data Protection Agreement which can be used by data processors as an addendum to any existing agreements.
Download Data Protection Agreement
GDPR Employee Privacy Policies
GDPR requires employers to give information to their workforce, setting out in particular the personal data (employee information) the employer holds about them, how it is used, and with whom the information is shared. The information required is more detailed than is currently required under existing data protection laws. Employers need to ensure that their employee privacy notices accurately reflect how they process employee data and are in line with GDPR requirements. GDPR compliant employee policies are available through the Bright Contracts software.
BrightPay Newsletter - Are you missing out?
GDPR is changing how we communicate with you. After May 2018, we will not be able to email you about webinar events, special offers, legislation changes, other group products and payroll related news without you subscribing to our newsletter. You will be able to unsubscribe at any time. Don’t miss out - sign up to our newsletter today!
Still confused about GDPR? Here are some more useful links that can help:
Apr 2018
10
GDPR will affect your employee processing!
The General Data Protection Regulation (GDPR) will come into force on 25th May 2018 changing the way we process data forever. The aim of the GDPR is to put greater protection on the way personal data is being processed for all EU citizens. Personal data can be anything from a name, an email address, NI number, bank details etc so as you can imagine employers process a huge amount of personal data on a daily basis. So how will the GDPR affect employers in terms of processing employee data?
Consent
Data in the employment context, will include information obtained from an employee during the recruitment process (regardless of whether or not they eventually got the job), it will also include the information you hold on current employees and previous employees. All this information may be saved in hard copy personnel files, held on HR systems or it could be information contained in emails or information obtained through employee monitoring.
Under GDPR your employee’s will have increased rights around their data. These rights will include:
- The Right to Access. It’s not a new concept that employees will be able to request access to the data you hold on them. However, there is a new recommendation that where possible employers should provide their employees with access to a secure self-service login where they can view data stored on them. This backs-up the whole concept of transparency and ease of access to data, which underpins the new Regulations.
- The Right to Rectification. Individuals are entitled to have personal data rectified if it is inaccurate or incomplete. This is an existing right and the onus is on the employer to ensure that your employee records are kept up-to-date. To help ensure you maintain up-to-date records, employers should make it easier for employees to update their data.
- The Right to be informed. Employers must be very transparent with employees about what data you hold, why and how long it is held for. Up until now it has been the common practice for many employers to include a standard clause in the employment contract regarding the processing of HR Data, under GDPR that will no longer be sufficient. Employers need to be reviewing their Employee Data Protection Policies and possibly writing new Employee Privacy Policies that go into detail on the processing of employee data.
Employee Self-Service
Under the GDPR legislation, where possible employers should be able to provide self-service remote access to a secure system which would allow employees view and manage their personal data online 24/7. Furthermore, the cloud functionality will improve your payroll processing with simple email distribution, safe document upload, easy leave management and improved communication with your employees. By introducing a self-service option, you will be taking steps to be GDPR ready.
Book a demo today to find out how you can benefit from BrightPay Connect.
Related articles:
Mar 2018
26
April Customer Newsletter - BrightPay 18/19 released
***** Please confirm whether you want to hear from us (GDPR related) - Important Update ****
From May 2018, we will not be able to email you about webinar events, special offers, legislation changes, other group products and payroll related news without you subscribing to our newsletter. This is due to the GDPR legislation. You will be able to unsubscribe at anytime. Don’t miss out - sign up to our newsletter today!
BrightPay 2018/19 is Now Available. What's New?
The release includes exciting new features to make your payroll and auto enrolment journey easier and less time consuming including:
- Auto enrolment minimum contribution increases (phasing) including letters
- Enhanced feature to email documents & reports
- Improved calendar features
- BrightPay Connect - Improved GDPR security and cloud functionality
- 2018/19 Scottish Rate of Income Tax (SRIT) codes, rates and thresholds
- Payroll journal export to Sage, Xero, Quickbooks, Exact & Kashflow
- API integration with Aviva
- April 2018 National Living Wage rates
See what’s new | Buy now | Download BrightPay 2018/19
You need to activate your BrightPay Connect licence to backup your data
After purchasing BrightPay Connect, you will need to activate your licence key code. If the licence is not activated, your payroll data will not backup automatically. Employees will not be able to access their payslips or request leave on the self-service portal. Activate your licence key code now to start availing of the many cloud benefits. Haven’t tried BrightPay Connect yet?
Book a demo today | Find out more
BrightPay Announces API Integration with Aviva
BrightPay are delighted to announce that we are the first payroll software on the market to offer direct integration with Aviva. An API is a fully integrated tool that directly links both the payroll and pension provider together. This integration allows customers to submit their pension data file to the Aviva online portal from within BrightPay.
Free Bright Contracts Webinar: UK Employment Law Overview
As busy employers it can be difficult to keep up-to-date with the constant changes in employment law. In this webinar our employment law experts discuss what is new in employment law, recent employment law cases and have a look at the most frequently asked questions that come through our support line.
Register for free webinar | Bright Contracts
For Payroll Bureaus / Accountants
Payroll Data and GDPR: What you need to know about consent, emailing payslips, and your legal obligation
In this guide, we will specifically look at the impact of GDPR on your payroll processing and address the biggest areas of concern. We will walk you through some important steps to achieve GDPR compliance.
Download here | Register for GDPR webinar
Understanding Minimum Contribution Increases (Phasing) and its Implications
Your clients will need to be ready to implement the increased minimum contribution rates for auto enrolment from April 2018 and April 2019. Our guide and free webinar look at what you must know about processing the increases in contribution rates in 2018 (and clients should thank you for it).
Download white paper | Register for free webinar
How BrightPay Connect can help with GDPR!
Under the GDPR legislation, where possible the controller should be able to offer self-service remote access to a secure system which would provide the individual with direct access to his or her personal data. BrightPay Connect is a self-service option which will give your payroll clients and their employees online remote access to view payslips and other payroll documents 24/7.
Dec 2017
5
Customer Update - December 2017
5 simple scenarios to stop pension scams
A pension scam – when someone tries to con you out of your pension money – will often start by someone contacting you unexpectedly with one of many pension scenarios. If you find yourself in one of these scenarios make sure to act fast to prevent becoming a victim of a pension scam.
Sign up to BrightPay’s newsletter
Do you want to hear more about future CPD events, free ebooks, industry updates and special offers? Subscribe to BrightPay’s newsletter today. You will have the option to unsubscribe at anytime.
Does automatic enrolment apply to you?
It is essential that all employers understand that if they employ just one person, they have certain legal duties for automatic enrolment. After the 1st October 2017, new employers who employ their first member of staff will have to comply with auto enrolment from the day the new employee starts.
Free Webinar - What does GDPR mean for your business?
All businesses process large amounts of personal data, not least in relation to their customers and their own employees. Consequently, the GDPR will impact most if not all areas of businesses and the impact it will have cannot be overstated. Places are limited.
Bureau Webinar: 6th February | Employer Webinar: 13th March
How to avoid harassment in the workplace
The recent allegations against Harvey Weinstein in the US have created somewhat of a snowball effect worldwide with thousands of women and men speaking out about their accounts of sexual harassment and assault, many of them being work related.
Cut down on payroll processing time with BrightPay Connect
Employers across the UK are automating the process of providing payroll and HR documents to employees, such as payslips, P60s, employment contracts and company handbooks. Annual leave management can also be simplified and automated giving you more time to focus on pressing business matters.
Out with the staging date - in with the duties start date!
The ‘duties start date’ is the date that an employee first begins to work for a company. For those recruiting after October 1st 2017, it is important to be aware that as soon as their new hire begins working for them, their automatic enrolment duties will also begin straight away.
Did you know BrightPay offers a free licence to micro businesses?
BrightPay offers a free employer licence to businesses with up to three employees which includes payslip and auto enrolment functionality? Also, our standard employer licence is just £99 + VAT per tax year. BrightPay has a 99% customer satisfaction rate.
Download free 60-day trial | Book a demo
More for bureaus -
Payroll for bureaus: From loss leader to profit centre
New technologies can positively impact the way bureaus offer payroll services. There are several exciting developments that are happening right now in the cloud. Be ready to offer a new level of payroll and HR services by embracing new-world online technologies.
Free CPD Webinar - The Future of Auto Enrolment
Auto enrolment has well and truly evolved since the rollout began in 2012. There are a number of changes coming over the next 12 months that payroll bureaus need to be aware of, including instant duties for new employers, increases in minimum contribution rates and automatic re-enrolment.
Accountants are making the big switch to BrightPay
BrightPay has been operating in the UK since 2012. Year on year, more accountants are moving payroll providers to BrightPay for several reasons. You may ask yourself, why are so many accountants and payroll bureaus moving to BrightPay.
The benefits of offering cloud payroll services
The payroll landscape is changing and many payroll bureaus are offering clients a certain level of cloud functionality that automates otherwise time consuming tasks. Online access to payroll information for your clients and their employees offers significant benefits for today's bureau which can will streamline many workforce management tasks.
