Recognising that the HR function sits at the heart of the employment relationship, this session explores how data protection applies in practice across the employee lifecycle.
From recruitment and selection, through day‑to‑day employment, disciplinary processes and health and safety activities, to the end of employment, this session highlights where organisations most commonly encounter data protection risk — often through everyday, well‑intentioned actions. Using practical workplace examples, it looks at how personal data about staff should be collected, shared, retained and safeguarded, and why informal practices can create unintended consequences.
Throughout, the focus is on helping people professionals understand their role in protecting trust, supporting good people management, and reducing organisational risk, without needing to become data protection specialists.
Timings
07:30-08:00 - Arrival, registration, tea, coffee and pastries
08:00 - 09:00- Presentation
09:00-09:30 - Q&A
09:30 - End and depart
Rachel Masterton, Deputy Data Protection Commissioner
Rachel is a founder member of the Office of the Data Protection Authority, joining in 2013 and helping to build a thriving office which focuses on the ‘human’ side of data protection.
Her encyclopaedic knowledge of Guernsey’s Data Protection legislation is a superpower in her role supervising the regulatory and enforcement functions of the ODPA, as well as deputising for the Data Protection Commissioner.
In 2024, Rachel’s responsibilities expanded to include international partnerships as the ODPA expanded its horizons under the new commissioner, taking on the role of co-Chair of the Global Privacy Assembly (GPA)’s International Enforcement Cooperation Working Group. She also oversees strategic planning, development and governance as part of her role in the senior leadership team.
Prior to joining the ODPA, Rachel began her career in data protection with eight and a half years at Guernsey Police as their data protection and information security officer.