Sensitive Employee and Medical Data

By the end

What you'll build

• Identify which employee records fall into heightened or special categories in your context
• Route health, adjustment and wellbeing information to the smallest necessary audience
• Explain why consent is a weak basis in an employment relationship and what is used instead
• Apply need-to-know and separation-of-file thinking to HR, medical and performance records
• Handle monitoring, investigation and reference data proportionately
• Recognise when a sensitive-data situation must be escalated rather than resolved locally

Curriculum

What's inside

8 modules · 48 lessons

1. 01

   Why employee data is different

   6 lessons
   • The imbalance problem: why employment consent rarely stands up
   • The employment relationship as a privacy context
   • Lawful bases commonly relied on for staff data
   • Reasonable expectations of employees
   • Transparency towards your own workforce
   • + 1 more lesson
2. 02

   Heightened categories

   6 lessons
   • Health, biometric, belief and background data: what changes when the category changes
   • Recognising special-category data in HR records
   • Criminal-record and background-check information
   • Diversity data collected voluntarily
   • Inference: when ordinary data becomes sensitive
   • + 1 more lesson
3. 03

   Medical and occupational health information

   7 lessons
   • The manager's need-to-know: outcome, not diagnosis
   • Separating clinical detail from workplace adjustments
   • Absence records and the minimum a line manager needs
   • Referrals, reports and where each should live
   • Confidentiality after a colleague returns to work
   • + 2 more lessons
4. 04

   Adjustments, wellbeing and disclosure

   6 lessons
   • Handling a voluntary disclosure with care and without spreading it
   • Adjustment requests: recording the need, not the condition
   • Wellbeing conversations and note-taking
   • Third-party disclosures from colleagues and family
   • When safety concerns change the calculus
   • + 1 more lesson
5. 05

   Monitoring, investigations and evidence

   6 lessons
   • Proportionate monitoring: necessity, notice and the least intrusive option
   • Workplace monitoring expectations and transparency
   • Investigation files and restricted access
   • Statements, witness identity and the limits of confidentiality
   • Retaining and disposing of investigation material
   • + 1 more lesson
6. 06

   Records, retention and access

   6 lessons
   • Where each type of employee record should live and for how long
   • Personnel file, medical file, payroll file: keeping them apart
   • Access reviews for HR systems and shared folders
   • Employee requests for their own data
   • Leavers, references and what survives departure
   • + 1 more lesson
7. 07

   Sharing across the organisation and beyond

   6 lessons
   • Group companies, benefits providers and payroll: sharing without oversharing
   • Internal sharing across teams and jurisdictions
   • Benefits and insurance intermediaries
   • Cross-border staff data and regional overlays
   • Escalation triggers you should never handle alone
   • + 1 more lesson
8. 08

   Practice and check

   5 lessons
   • Sensitive data, right handlingmatch pairs
   • Standing up workplace monitoringsequence order
   • The line that protects peoplefill blank
   • The corridor disclosurescenario
   • Course quizquiz

The shape of it

How this course works