For general enquiries +44 (0)808 169 4320
  • Get in touch
  • About

    Birketts is a full service legal firm with offices throughout the East of England and in London.

    Whatever the challenge, we're here for you. As a proactive partner, we're always thinking about the changes and opportunities that you or your business will face, taking you to the next level.

    • Discover Birketts
    • Leadership Team
    • Offices
    • Environmental Social Governance
    • Compliance

    Our Culture

    Awards

  • Sectors
    • Agriculture
    • Banking & Finance
    • Care Homes
    • Charities & Not for Profit
    • Ecclesiastical
    • Education
    • Energy & Utilities
    • Family Business
    • Food
    • Healthcare
    • Housebuilders
    • Insurance & ReInsurance
    • International Services
    • Leisure & Tourism
    • Local Government
    • Motor Industry
    • Public Sector
    • Real Estate Investment
    • Retail
    • Shipping & International Trade
    • SIPPs / SSASs
    • Social Housing
    • Transport & Logistics
  • Services
    Services for business Services for individuals
    for business
    for individuals
    for business
    • Agriculture
    • Banking & Finance
    • Commercial Property
    • Commercial & Technology
    • Competition
    • Construction & Engineering
    • Corporate, Mergers and Acquisitions
    • Data Protection Services
    • Employee Incentives
    • Employment
    • Franchising
    • Health & Safety
    • Immigration Services
    • Intellectual Property
    • International Services
    • Litigation & Dispute Resolution
    • Planning & Environment
    • Property Disputes
    • Public Inquiries
    • Regulatory & Corporate Defence
    • Restructuring & Insolvency
    • Shipping & International Trade
    • Tax
    for individuals
    • Agriculture
    • Construction
    • Contentious Trust & Probate
    • Court of Protection
    • Data Protection Services
    • Dispute Resolution
    • Employment
    • Estate Planning & Wills
    • Family
    • Financial Crime
    • Immigration Services
    • International Services
    • Leasehold Enfranchisement
    • Motoring Offences
    • Personal Taxation
    • Private Criminal Defence
    • Probate
    • Property Disputes
    • Public Inquiries
    • Residential Property
  • Our People
  • Insight

    Legal Updates

    News

    Newsletters

    Events

    Webinars

    Podcasts

    Shaping excellence

  • Join us
    • Current Vacancies
    • Our Story
    • Life at Birketts
    • Learning & Development
    • Benefits at Birketts
    • Environmental Social Governance
    • Recruitment Contacts

    Graduates

    Business Services

    Legal Secretaries

    Lawyers

  • Home
  • Legal Updates
  • Employment and Immigration Update – HMRC’s processing of employee criminal offence data lawful
Share on
Employment and Immigration Update – HMRC’s processing of employee criminal offence data lawful
September 25, 2020

The High Court has struck out and summarily dismissed an employee’s claims against her employer, HM Revenue & Customs (HMRC), for breach of the General Data Protection Regulation ((EU) 2016/679) and the Data Protection Act 2018 (DPA 2018).

Hopkins v The Commissioners for her Majesty’s Revenue and Customs [2020] EWHC 2355 (QB)

The Court held that HMRC had processed the claimant’s personal data lawfully in all but one claim brought in the context of ongoing disciplinary proceedings relating to her suspected involvement in a serious sexual offence, for which she was arrested but not charged. Following her arrest and pursuant to provisions in her employment contract, she disclosed the arrest and the offence to her line manager. She was suspended and notified that she would be subject to disciplinary proceedings.

The employee raised numerous causes of action, including breach of the Rehabilitation of Offenders Act 1974, the Health and Safety at Work Act 1974, misfeasance in public office and defamation. This update focuses on the Court’s decision in relation to breach of the GDPR and DPA 2018, which found that:

  • neither Article 10 of the GDPR nor section 11(2) of the DPA 2018 create a discrete obligation to “acknowledge” that data is criminal offence data
  • HMRC had a lawful basis for the processing of special category (here, criminal offence) data to suspend the employee and to commence the disciplinary investigation. The processing was necessary for the performance of her employment contract (Article 6(1)(b), GDPR) and the processing met the requirements of Article 10, as supplemented by section 10 of the DPA 2018:

1. the processing was necessary for the purpose of HMRC exercising rights conferred on it by law (the employment contract)
2. HMRC had an appropriate policy document in place

  • HMRC’s sharing of personal data internally in connection with the investigation was lawful
  • HMRC’s sharing of personal data externally, with the Independent Office for Police Conduct, was lawful because processing was necessary for reasons of substantial public interest and necessary in the exercise of a function conferred on HMRC by law
  • the employee’s letter of 18 November 2018 to HMRC, requesting that they cease distributing “highly personal information”, was not a subject access request but it was reasonably arguable that the request was for information falling within Article 15(1)(a), (c) and (d) and the time limit by which to respond, had not been met by HMRC
  • HMRC provided information detailing how it would process employee personal data in its Staff Privacy Notice, which was widely available on the staff intranet and had been provided to the employee along with copies of HMRC’s conduct and disciplinary policies.

The decision provides a useful insight into the application of the GDPR and DPA 2018 in the context of internal disciplinary proceedings and the sharing of personal data within and outside an organisation. It emphasises the importance of good staff privacy notices and policies, identifying a lawful basis for processing and maintaining records of processing activities.

These articles are from the September 2020 issue of Employment and Immigration Law Update, our monthly newsletter for HR professionals. To download the latest issue, please visit the newsletter section of our website. For further information please contact Liz Stevens or another member of Birketts’ Employment Law Team.

Kitty Rosser

View profile

The content of this article is for general information only. It is not, and should not be taken as, legal advice. If you require any further information in relation to this article please contact the author in the first instance. Law covered as at September 2020.

Join us

  • Business services
  • Experienced lawyers
  • Graduates

Information

  • Anti Slavery
  • Cookies
  • Fees
  • Statement

Find us

  • Contact us
  • Our People
  • Offices

Subscribe

  • Subscribe
© Copyright Birketts LLP 2022 All rights reserved
Follow us: