III.9.d.i—DPA Jurisdiction for Employee Complaints
>Control Description
In so far as personal information is used only in the context of the employment relationship, primary responsibility for the data vis-a-vis the employee remains with the organization in the EU. It follows that, where European employees make complaints about violations of their data protection rights and are not satisfied with the results of internal review, complaint, and appeal procedures (or any applicable grievance procedures under a contract with a trade union), they should be directed to the state or national data protection or labor authority in the jurisdiction where the employees work. This includes cases where the alleged mishandling of their personal information is the responsibility of the U.S. organization that has received the information from the employer and thus involves an alleged breach of the Principles. This will be the most efficient way to address the often overlapping rights and obligations imposed by local labor law and labor agreements as well as data protection law.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.