GDPR at Work
GDPR at Work in the UK: What Every Worker Needs to Know
If you work in the UK, whether as a temporary worker, agency worker or permanent employee, your personal data is protected by law.
The UK General Data Protection Regulation, known as GDPR, sets clear rules about how employers and recruitment agencies collect, store and use your personal information. It also gives you important rights over that data.
This guide explains what GDPR at work means, how it affects you, and what you can do if you have concerns.
What is GDPR?
GDPR works alongside the Data Protection Act 2018 to regulate how organisations handle personal data in England, Scotland and Wales.
Personal data is any information that identifies you, directly or indirectly. In the workplace, this can include:
Your name, address and contact details
National Insurance number
Payroll and tax records
Bank details
Right to work documentation
Employment history and references
Sickness and absence records
Performance or disciplinary records
Under UK data protection law, employers must ensure personal data is:
Processed lawfully, fairly and transparently
Collected for specific and legitimate purposes
Limited to what is necessary
Accurate and kept up to date
Stored securely
Not kept for longer than required
These are known as the core data protection principles.
Why GDPR Matters at Work
Every employer in the UK must have a lawful basis for processing employee data. In most cases, this will be because:
- It is necessary to fulfil your employment contract
- It is required to meet a legal obligation
- It is in the organisation’s legitimate interests
Consent is not usually relied upon in employment relationships because of the imbalance of power between employer and worker.
Whether you are a permanent employee or working through a recruitment agency, your data must be handled in line with UK GDPR.
Your Rights as a Worker
Under UK GDPR, workers have several important rights.
- The Right to Be Informed: You must be told how your employer or agency uses your data. This information is usually provided in a privacy notice when you register or start work.
- The Right of Access: You have the right to request a copy of the personal data your employer holds about you. This is known as making a Subject Access Request. Employers must usually respond within one month.
- The Right to Rectification: If your information is inaccurate or incomplete, you can request that it is corrected.
- The Right to Erasure: In certain circumstances, you can ask for your personal data to be deleted. However, employers may need to retain some information for legal or regulatory reasons.
- The Right to Restrict Processing or Object: You may have the right to limit how your data is used or to object to certain types of processing.
- Special Category Data: Some types of information, such as health records or trade union membership, are classed as special category data and are subject to stricter protections under UK law.
If you believe your rights have been breached, you can raise concerns internally or contact the Information Commissioner’s Office (ICO), the UK’s independent data protection authority.
How GDPR Applies to Temporary Workers
If you are working through a recruitment agency, like The Best Connection, both the agency and the client you are placed with may process your personal data.
For example:
- The agency may process your data to find you work, manage assignments and handle payroll.
- The client employer may process your data to manage day to day work, health and safety, and site access.
Both organisations must comply with UK GDPR and clearly explain their responsibilities. Importantly, temporary workers have the same data protection rights as permanent employees.
How We Support Workers at The Best Connection
At The Best Connection, we are committed to protecting the personal data of all workers across our UK branch network.
We:
- Collect only the information necessary to support your registration and placements
- Store your data securely
- Provide clear information about how your data is used
- Support you if you wish to access, update or query your information
If you have questions about your data or would like to exercise your GDPR rights, you can contact your local branch at any time.
Looking for Work or Support?
If you are currently searching for temporary or permanent roles across the UK, you can explore our latest vacancies here.
For more practical career advice and guidance, visit our career advice hub.
All information in this article is based on guidance from GOV.UK and the ICO.
Other Blogs You Might Like
© 2026 The Best Connection Group Limited
VAT No. GB 661 5422 47 | Registered Company No. 02600534
The Best Connection Group Limited is an Appointed Representative of Howden UK Brokers Limited, FCA register number 307663. Howden UK Brokers Limited is registered in England and Wales, company registration number 02831010. Registered address: One Creechurch Place, London, United Kingdom, EC3A 5AF
Registration Temporarily Unavailable
We’re currently making essential updates to our website, so registration via this page is currently unavailable.
In the meantime, please apply directly to a job listing via the ‘Find a Job’ button below or contact your local branch to register and discuss current opportunities.
If you’d prefer to register online, please check back soon - website registration will be available again shortly.