14.12.2017
Should data accessibility be stated for each employee?
It depends on the company size. If the company only has three employees, then it should be stated which data employees can access. If the company has several departments, then – most likely – access to data will be granted to a group of people/department. For example, the department of human resources has access to all data contained by employment contracts.
Whereas in employment contracts the best practice is to state an employee’s access to data both in their contract and in company internal policy. It is important that employees are informed about their work involving data processing and that each employee with their signature agrees to follow the internal policy and the requirements of the Regulation.