Article 88 GDPR
processing in the context of employment

1. Member States may include more specific provisions in their laws or collective agreements to ensure the protection of rights and freedoms when employees' personal data are processed in connection with employment, in particular for the purposes of recruitment, performance of the employment contract, including performance of obligations set forth by law or collective agreements, management, planning and organization of work, equality and diversity in the workplace, occupational health and safety, protection of the employer's or client's property, and for the individual or collective exercise of rights and enjoyment of employment-related benefits, as well as for the purpose of terminating the employment relationship.

2. These provisions must include appropriate and detailed measures to ensure that the data subject's dignity, legitimate interests and fundamental rights are respected, particularly in terms of the transparency of processing, the transfer of personal data within a group of companies or a group of joint ventures, and workplace monitoring systems.

3. By May 25, 2018, each Member State shall notify the Commission of its regulations adopted pursuant to paragraph 1, and immediately thereafter of any subsequent amendment concerning them.