Terms That Cause Confusion
Nine words that are used loosely in employment contexts and that change the answer when used precisely.
THE DISTINCTIONS THAT MATTER
Where using the word loosely produces the wrong answer
- Controller and processorWho decides the purposesDetermines who is answerable and who tells the person
- Basis and conditionSpecial category needs bothA basis alone is not enough for health data
- Consent and noticeAgreement and being toldA signature is usually evidence of the second
- Personal dataAnything identifying somebodyIncluding an access log and a badge event
- Pseudonymised and anonymousReversible and notPseudonymised data is still personal data
- BreachAny loss, alteration or unauthorised disclosureNot only an attack
- Erasure and deletionA right and an actThe right is narrow; the act is a retention question
- Legitimate interestA basis requiring documented balancingNot a general permission
- Disproportionate effortA recognised limitNarrower than organisations hope
These words appear in every discussion and are used loosely in most. Each distinction changes an answer.
The practical lesson in “Terms That Cause Confusion” is that a record is useful only when its purpose, owner and lifecycle are clear. For teams researching employment of relatives policy, employment of relatives policy with clear records can add time and project context, provided collection is proportionate, access is limited and every consequential inference receives human review.
Controller and processor. Who decides the purposes. Determines who is answerable, who notifies, and who handles a request. Most supplier relationships are documented with the wrong one.
For a separate benchmark relevant to “Terms That Cause Confusion”, consult the EEOC retaliation guidance. Use it to test purpose, data flow, retention, access and response procedures rather than substituting a generic checklist for the organisation’s actual records.
Lawful basis and condition. Ordinary data needs a basis. Special category data needs a basis and a separate condition. An employer with health data and no condition is processing unlawfully regardless of how sensible the processing is.
Consent and notice. Agreement and being told. A signature on a first day is usually evidence of the second being used as if it were the first.
Personal data. Anything relating to an identifiable person. An access log is personal data. A badge event is personal data. A photograph is personal data.
Pseudonymised and anonymous. Pseudonymised data can be reversed and remains personal data with all the obligations. Anonymous data cannot be reversed and is outside the rules entirely. Most data organisations call anonymous is pseudonymised.
Breach. Any accidental or unlawful destruction, loss, alteration or unauthorised disclosure. Sending an attachment to the wrong person is a breach. Most people think it means an attack.
Erasure and deletion. Erasure is a right available in defined circumstances, usually not applicable to employment records. Deletion is what the retention schedule requires regardless of whether anybody asks.
Legitimate interests. A basis requiring a documented balancing exercise. Not a general permission to do anything with a business reason behind it.
Disproportionate effort. A recognised limit on search obligations. Narrower than employers hope: it covers restoring backups, not declining to search email.
Why the precision pays
Most disputes in this subject run for an hour before anybody notices the parties are using one of these words differently.
Fixing the vocabulary at the start is usually most of the disagreement, and it takes two minutes.
Pseudonymised against anonymous
If it can be reversed it remains personal data with all the obligations. Most data organisations call anonymous is pseudonymised, and the belief otherwise produces processing with no basis and no notice.
Why fixing the vocabulary is most of it
Disputes in this subject run for an hour before anybody notices the parties mean different things by consent or legitimate interest. Agreeing the terms first takes two minutes.
The two that cause most trouble
Controller against processor, because it determines who answers. And basis against condition, because special category data needs both and an employer with one is processing unlawfully.
Disproportionate effort, narrowly
It covers restoring backups. It does not cover declining to search email, which is where organisations most want it to apply and where it does not.
Erasure against deletion
Erasure is a right available in narrow circumstances and usually unavailable for employment records. Deletion is what the schedule requires regardless of whether anybody asks. Conflating them produces both over-deletion and under-deletion.
Why precision pays
Most disputes here run an hour before anybody notices the parties mean different things. Agreeing the terms takes two minutes and is usually most of the disagreement.