The Data Protection (Notification and Notification Fees) Regulations 2000

Staff administration exemption

2.  The processing—

(a) is for the purposes of appointments or removals, pay, discipline, superannuation, work management or other personnel matters in relation to the staff of the data controller;

(b) is of personal data in respect of which the data subject is—

(i) a past, existing or prospective member of staff of the data controller; or

(ii) any person the processing of whose personal data is necessary for the exempt purposes;

(c) is of personal data consisting of the name, address and other identifiers of the data subject or information as to—

(i) qualifications, work experience or pay; or

(ii) other matters the processing of which is necessary for the exempt purposes;

(d) does not involve disclosure of the personal data to any third party other than—

(i) with the consent of the data subject; or

(ii) where it is necessary to make such disclosure for the exempt purposes; and

(e) does not involve keeping the personal data after the relationship between the data controller and staff member ends, unless and for so long as it is necessary to do so for the exempt purposes.