
Employee Data Protection Services
Legal guidance to help you protect employee data, reduce risk and stay compliant with confidence.
GDPR support
Helping you meet your obligations as an employer under UK GDPR and the Data Protection Act.
Policies and documentation assistance
Clear policies, privacy notices and procedures tailored to your business.
Data breach and DSAR advice
Expert support when responding to breaches, access requests and ICO enquiries.
Every business holds personal data.
Employee records, payroll information, performance files, recruitment data, the list is longer than most business owners realise. UK GDPR, the Data Protection Act 2018, and PECR bring some significant employer obligations.
Getting data protection wrong, along with being a compliance issue, exposes your business to ICO investigations, fines (up to £17.5 million or 4% of global turnover!) and legal claims from staff whose data has been mishandled.
With Omny Group’s data protection specialists, you get clear, practical guidance from a Chambers and Legal 500 recognised team who understand both the law and how businesses actually operate.
Trusted by
Frequently asked questions
Does data protection law apply to small businesses?
Yes. UK GDPR and the Data Protection Act 2018 apply to any organisation that processes personal data, regardless of size. The documentation required may differ from a large enterprise, but the underlying obligations are the same. The good news is that with the right guidance, compliance for a smaller business is straightforward.
What personal data do employers typically hold about employees?
More than many realise. Names, addresses, bank details, national insurance numbers, health information, disciplinary records, performance reviews, photographs, and even IP addresses collected through device monitoring all count as personal data. Each category carries specific handling requirements under UK GDPR.
What happens if my business suffers a data breach?
Certain types of breaches must be reported to the ICO within 72 hours of you becoming aware of them. Where the breach is likely to result in high risk to individuals, you must also notify the affected people directly. Omny’s team can advise you on whether a breach meets the threshold for notification and manage the process on your behalf.
Can employees request access to the data we hold about them?
Yes. Under UK GDPR, employees have the right to submit a Data Subject Access Request and receive a copy of their personal data within one month. Handling these requests correctly, including knowing what you can legitimately withhold, requires careful legal judgment. Our team manages this for businesses that want to get it right.
How does Omny’s data protection support work alongside HR and employment law advice?
Because Omny Group covers HR, Employment Law, and people strategy under one roof, our data protection guidance fits into the broader context of how you manage your people. Employment issues often raise data protection questions too – so you get joined-up advice from one team, rather than conflicting guidance from separate advisers.

























