If you have already collected and used employee data for one business purpose as outlined above, it is generally OK to subsequently use it for secondary purposes, as long as these are also legitimate business purposes, and closely related to the original purpose. In some cases, however, you may need to take extra precautions. You can find out more in the Privacy Code for Employee Data, or by consulting your Local Privacy Officer.
You should only use employee data if:
• The purpose is important enough to justify this, and
• There is no other way to achieve this purpose that is less intrusive on the employee’s privacy