Following the entry into force of the new Ordinance on the Content and Manner of Keeping Records of Employees Employed by the Employer, the Personal Data Protection Agency has published an opinion on the justification for the collection and storage of copies of employees' identity cards by the employer.

In its opinion, the Agency states, among other things, that the retention of copies of employees' identity cards by the employer cannot be considered a legal obligation of the employer under the Ordinance, within the meaning of the provision of Article 6(1)(c) of the General Data Protection Regulation.

Employers who keep copies of identity cards in their records of employees are obliged to destroy them as soon as possible, or in the event that they still decide to keep them, find an appropriate legal basis for their storage. Also, at the time of collecting a copy of the identity card, the employer is obliged to inform the employee about the purpose of the processing and the legal basis for the processing.