The General Data Protection Regulation (GDPR) is a regulation created by the European Parliament, with the aim being to give citizens under the European Union more protection over their personal data. The GDPR aims to ensure strict conditions for gathering, collecting, processing and storing data.

The GDPR applies to any organisation that operates in the collection, processing, or storage of any personal data or information of citizens within the European Union.

GDPR took effect on 25th May 2018.

Personal data means any information that can uniquely identify an individual, either directly or indirectly. Identification could pertain to physical, physiological, genetic, mental, economic, cultural, or social identity factors.

The data considered personal under the GDPR legislation includes, but not limited to:

• Name
• Location data.
• Photos.
• Biometric data.

• Employment Hero has implemented reasonable data protection measures to protect users’ personal data and privacy against loss or exposure.
• If a data breach containing personal and sensitive information occurs, the requirement is for Employment Hero to notify the appropriate national body.
• Update and create necessary internal policies and procedures to adhere to the new requirements set out in the GDPR. This includes updating and making appropriate contractual terms.
• We have appointed a data protection officer within the business and will handle questions in relation to the GDPR and your privacy.