GDPR in HR processes

There are many sources of personal data in HR processes. For some of them, retention times are defined by law, for others it is the employer who decides on the period of time for which they will be processed by the company. There are also situations of data entrustment, e.g. in the case of medical care, insurance or training. What kind of legal consents should the employer take care of? Who is responsible for proper data protection in the case of outsourcing HR and payroll services?
Krzysztof Grabowski, Inspector of Personal Data Protection in Crowe, answers questions concerning personal data protection in HR processes.