GDPR won’t go away
Lands Authority security flaws
As you may have followed on the media the Lands Authority had a massive flaw in its website and this meant that data subject’s details including identity card details, email correspondence and much more was easily accessible on the internet.
What to take from this: 1. See if you really need all the data that you are collecting and storing. 2. Make sure your IT infrastructure is secure – you can have all the GDPR documents in place but IT flaws can doom your company.
Maltapost PLC Vs Kummissarju Għall-Informazzjoni u l-Protezzjoni tad-Data
The Court of Appeal on the 8th October 2018 held that the IDPC was right to conclude that CCTV footage should, generally, be deleted after 7 days. Furthermore a 20-day retention period can only be agreed to, as an exception, for a high risk area and the nature of the work carried out in such area.
What to take from this: Do not keep CCTV footage longer than is necessary and NO it should not be until your storage is full. Keep in mind the 7 day retention period unless there is an exception which applies.
N.B. This decision although based on the old law of data protection it still remains of relevance and remember that GDPR is more burdensome so it is important to keep this judgement in mind at all times.
Unused Vacation Leave
Two joined cases, Stadt Wuppertal v Bauer and Willmeroth v Broßonn (C-569/16 and C-570/16)
Workers right to paid annual leave does not terminate upon the worker’s death therefore heirs are entitled to claim any accrued but untaken leave not taken up by the deceased worker.
What to take from this: You should not refuse to make a payment in lieu of accrued holiday entitlement to the heirs of the deceased employee.
Max-Planck-Gesellschaft v Shimizu and Kreuziger v Land Berlin – European Court of Justice
It often happens that employees do not take all their holiday leave entitlement within the year and the fundamental question is what happens if such employee does not take the outstanding statutory leave entitlement before the end of the year. Can they be prevented from carrying it over?
No, unless the employer has ensured “specifically and transparently” that the employee has been given the opportunity to take the leave, held the CJEU
What to take from this: You need to have a system in place to send the necessary reminders particularly towards the end of the year informing your employees what holiday entitlement is still outstanding and encourage them to take it.