Between Privacy Protection and Data Progression - The GDPR in the Context of People Analytics


  • Nella Junge



people analytics, privacy, data protection, General Data Protection Regulation (GDPR), datafication


New analytical capabilities have revolutionized the field of Human Resources (HR). With the incessant creation of data and data sources, a new field of practice has developed: people analytics.However, people analytics raises crucial privacy concerns for employees. The new General Data Protection Regulation (GDPR) is supposed to provide more transparency and stronger protection for individuals. By conducting interviews with experts in people analytics and carrying out a survey with people analytics practitioners, this paper examines how the GDPR can be expected to affect organisations using people analytics and their employees. The results of this research indicate that the GDPR will provide stronger privacy and data protection for employees and still allow organisations to conduct people analytics.


Albrecht, J. P. (2016). How the GDPR Will Change the World. Eur. Data Prot. L. Rev., 2, 287.

Baek, P. (2016). New trends in people analytics. Retrieved March 20, 2018 from

Bailie, I. (n.d.). LinkedIn. Retrieved April 25, 2018 from

Barrière, J. M. (2016). The influence of trust on attitude of employees towards HR Analytics

in organisations (Master's thesis, University of Twente).

Batra, S. (2014). Big data analytics and its reflections on DIKW hierarchy. Review of Management, 4(1/2), 5.

Beyond HR Forum (n.d.). Jonathan Ferrar – Founder of OchreRoch Co-Author of The Power of People. Retrieved April 25, 2018 from

Bodie, M. T., Cherry, M. A., McCormick, M. L., & Tang, J. (2017). The Law and policy of people analytics. U. Colo. L. Rev., 88, 961.

Bose, R. (2009). Advanced analytics: opportunities and challenges. Industrial Management & Data Systems, 109(2), 155-172.

Cecere, G., Le Guel, F., Manant, M., & Soulié, N. (2017). The Economics of Privacy (No. hal-01557755). HAL.

Chamorro-Premuzic, T., Akhtar, R., Winsborough, D., & Sherman, R. A. (2017). The datafication of talent: how technology is advancing the science of human potential at work. Current Opinion in Behavioral Sciences, 18, 13-16.

Cherry, M. A. (2016). People Analytics and Invisible Labor. Louis ULJ, 61, 1.

Hert, P. D., & Papakonstantinou, V. (2016). The new General Data Protection Regulation: Still a sound system for the protection of individuals? Computer Law & Security Review,32(2), 179-194.

Fitzenz, J. (2010). The new HR analytics: Predicting the economic value of your companys human capital investments. New York: AMACOM, American Management Association.

Fried, C. (1990). Privacy. In: Ermann, M.D.,Williams, M.B., and Gutierrez, C. (Eds.),Computers, Ethics, and Society. Oxford University Press, New York. pp. 51–67.

Forbes Agency Council (2018, May, 13) Key Takeaways From The Facebook-Cambridge Analytica Data Scandal Retrieved May 15, 2018 from

Guenole, N., Feinzig, S., Ferrar, J., & Allden, J. (2015). Starting the Workforce Analytics Journey: The First 100 Days. Retrieved April 13, 2018 from

Goddard, M. (2017). The EU General Data Protection Regulation (GDPR): European regulation that has a global impact. International Journal of Market Research, 59(6), 703-705.

Hallinan, D., Friedewald, M., & McCarthy, P. (2012). Citizens' perceptions of data protection and privacy in Europe. Computer law & security review, 28(3), 263-272.

Hintze, M., & Lafever, G. (2017). Meeting Upcoming GDPR Requirements While Maximizing the Full Value of Data Analytics. SSRN Electronic Journal.

Holthaus, C., Park, Y. K., & Stock-Homburg, R. (2015). People Analytics und Datenschutz–Ein Widerspruch? [People analytics and data protection – a contradiction?] Datenschutz und Datensicherheit-DuD, 39(10), 676-681.

HR Tech Summit (2018). David Green. Retrieved April 25, 2018 from

Kim, P. T., & Hanson, E. A. (2016). People Analytics and the Regulation of Information under the Fair Credit Reporting Act. Louis ULJ, 61, 17.

King, N. J., & Forder, J. (2016). Data analytics and consumer profiling: finding appropriate privacy principles for discovered data. Computer Law & Security Review, 32(5), 696-714.

Klosek, J. (2000). Data privacy in the information age. Westport, CT: Quorum Books.

Koops, B. J. (2014). The trouble with European data protection law. International Data Privacy Law, 4(4), 250-261.

Kshetri, N. (2014). Big data׳ s impact on privacy, security and consumer welfare. Telecommunications Policy, 38(11), 1134-1145.

Lal, P. (2015). Transforming HR in the digital era: Workforce analytics can move people specialists to the center of decision-making. Human Resource Management International Digest, 23(3), 1-4.

Mai, J. E. (2016). Big data privacy: The datafication of personal information. The Information Society, 32(3), 192-199.

Mantelero, A. (2016). Personal data for decisional purposes in the age of analytics: From an individual to a collective dimension of data protection. Computer law & security review, 32(2), 238-255.

Momin, W. Y. M., & Mishra, K. (2015). HR Analytics as a strategic workforce planning. IJAR, 1(4), 258-260.

Moor, J.H. (1997). Towards a theory of privacy in the information age. Computers and Society, 27(3), 27–32.

Nissenbaum, H. F. (2010). Privacy in context technology, policy, and the integrity of social life. Stanford, CA: Stanford Law Books.

Regulation, E. U. (2016). Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). Official Journal of the European Union (OJ), 59, 1-88.

Reindl, C. U. (2016). People Analytics: Datengestützte Mitarbeiterführung als Chance für die Organisationspsychologie. [People Analytics: an organizational psychology perspective on data-oriented leadership.] Gruppe. Interaktion. Organisation. Zeitschrift für Angewandte Organisationspsychologie (GIO), 47(2), 193-197.

Schwartz, J., Collins, L., Stockton, H., Wagner, D., & Walsh, B. (2017). Rewriting the Rules for the Digital Age: 2017 Deloitte Global Human Capital Trends.

Shah, N., Irani, Z., & Sharif, A. M. (2017). Big data in an HR context: Exploring organizational change readiness, employee attitudes and behaviors. Journal of Business Research, 70, 366-378.

Sprague, R. (2015). Welcome to the machine: Privacy and workplace implications of predictive analytics. Rich. JL & Tech., 21, 1.

Tankard, C. (2016). What the GDPR means for businesses. Network Security, 2016(6), 5-8.

Tavani, H. T. (2008). Informational privacy: Concepts, theories, and controversies. The

handbook of information and computer ethics, ed. K. E. Himma and H. T. Tavani, 131–164. Hoboken, NJ: Wiley.

Tene, O., & Polonetsky, J. (2012). Big data for all: Privacy and user control in the age of

analytics. Nw. J. Tech. & Intell. Prop., 11, xxvii.

Tikkinen-Piri, C., Rohunen, A., & Markkula, J. (2018). EU General Data Protection Regulation: Changes and implications for personal data collecting companies. Computer Law & Security Review.

Van den Heuvel, S., & Bondarouk, T. (2016). The Rise (and Fall) of HR Analytics. In Proceedings from 2nd HR Division International Conference (HRIC), Sidney, Australia.

Van der Togt, J., & Rasmussen, T. H. (2017). Toward evidence-based HR. Journal of Organizational Effectiveness: People and Performance, 4(2), 127-132.

Westin, A.F. (1967). Privacy and Freedom. Atheneum Press, New York.

Williams, B. A., Brooks, C. F., & Shmargad, Y. (2018). How Algorithms Discriminate Based on Data they Lack: Challenges, Solutions, and Policy Implications. Journal of Information Policy, 8, 78-115.