HR proposes relying on employee consent as the primary lawful basis for ordinary payroll processing. What is the better GDPR-aligned approach?
Select an answer to reveal the explanation.
Short Explanation
You do not need a cheerful “I consent to being paid” checkbox every month. Payroll rides on the employment contract and legal duties to pay taxes and wages. Consent is the wrong starring actor for that scene.
Full Explanation
Core employment processing such as payroll typically relies on Article 6 bases like performance of a contract and compliance with legal obligations (for example tax and social-security rules). Consent is rarely appropriate as the primary basis because of imbalance of power and because refusal would be impractical. Controllers should map each employment processing purpose to a suitable basis rather than defaulting to consent.