Personal data controller in collective employment law

Entering into force of the GDPR was an event that equally affected both employers and trade unions. In the course of practical implementation of provisions of law regarding personal data protection the main focus was put on employers who traditionally are seen as having bigger influence on factual and legal situation of employees. Trade unions seem to have overlooked the fact that they also process wide range of personal data of their members, often of very sensitive character. This article is an analysis of legal position of trade unions in relation of processing personal data with special emphasis put on cooperation with employers and employees in performing their statutory obligations. Clear assignment of position of data controller to trade union creates issues due to the wording of provisions of the GDPR. The same problem is present in case of different tiers of trade unions, especially those of regional or national range. However, function and role of trade unions allow to indicate them as data controllers of their members. In this paper the Author analyses legal bases for processing personal data by trade unions and determines transfers of personal data within trade unions and between trade unions and employers. Finally, the Author verifies documentation used by chosen representative trade unions in Poland in order to determine how trade unions themselves approach the issue of correct establishment of their position in processing personal data and how they apply provisions on personal data protection in practice.

ASJC: 3308

JEL: K31

Entering into force of the GDPR was an event that equally affected both employers and trade unions. In the course of practical implementation of provisions of law regarding personal data protection the main focus was put on employers who traditionally are seen as having bigger influence on factual and legal situation of employees. Trade unions seem to have overlooked the fact that they also process wide range of personal data of their members, often of very sensitive character. This article is an analysis of legal position of trade unions in relation of processing personal data with special emphasis put on cooperation with employers and employees in performing their statutory obligations. Clear assignment of position of data controller to trade union creates issues due to the wording of provisions of the GDPR. The same problem is present in case of different tiers of trade unions, especially those of regional or national range. However, function and role of trade unions allow to indicate them as data controllers of their members. In this paper the Author analyses legal bases for processing personal data by trade unions and determines transfers of personal data within trade unions and between trade unions and employers. Finally, the Author verifies documentation used by chosen representative trade unions in Poland in order to determine how trade unions themselves approach the issue of correct establishment of their position in processing personal data and how they apply provisions on personal data protection in practice.

ASJC: 3308

JEL: K31