Before General Data Protection Regulation (“GDPR”), carrying out criminal record checks on prospective employees was something many companies did as a matter of routine. But under the new GDPR, which is enforceable from 25th May 2018, background screening can only occur under very specific conditions.  

Under these regulations only two types of organisations are permitted to process personal data relating to criminal convictions and offences. Namely: