Casework



Union reps will need to comply with data protection laws under the GDPR when representing individual members, as these duties will involve them processing the members’ personal data, for example specific information about a disciplinary concern or grievance. Unions are likely to be liable for data breaches by a rep carrying out union duties, so regular training should be provided. 



Union reps owe a duty of confidentiality to the member and need to put in place processes to keep files safe and secure, especially when out of the office, and for returning them safely. When discussing casework, the member’s identity should only be shared with those who need to know. Particular care is needed for sensitive health information. Computers should be password protected and laptops and IPads should be stored and transported securely.