Processing of personal data of an employee, collected by employer using digital technologies

The aim of this article is to analyse the amount and categories of an employees’ data collected by employer using the technical access control devices, to analyse for what purpose the employer is entitled to use such data in order to ensure the protection of the employees’ privacy at the same time. In the article, the author uses methods of interpretation of legal acts - grammatical method, systemic interpretation method as well as teleological interpretation method in order to analyse the legal regulation of personal data processing in employment legal relationship. The monitoring of electronic devices in the workplace, provides an opportunity for an employer to analyse large amount of employee’s personal data. Employer can receive data not only from such devices as phone, personal computer, email, etc., but also from different devices used as access control systems (e.g., physical electronic authorization devices (smart cards), etc.). This kind of monitoring and data processing can be considered as the main threat to employees’ privacy. Data collected from the devices used for the access control in the working place, should be used only for the security purposes, but in practice, these data can also allow the tracking of all employees’ activities. The article reveals that despite the fact that the employer has access to large amounts of employee personal data collected from technical access control devices, the employer can only use them for specific purposes.The employer's wish to control the daily work of the employee is not sufficient to use all the data at the employer's disposal.