Leave and flexitime - EMCDDA

Opinion of 20 June 2008 on a notification for prior checking  on the management of leave and flexitime (Case 2008-158)
The EMCDDA records all leave taken by its staff on an in-house database "Sic Congés". The system is designed to enable every member of staff to enter, amend or cancel data necessary for a leave application as well as to enable managers (head of units, director) to monitor leave and leave administrators (HR staff) to manage leave entitlements. When doing so, personal data concerning health are revealed in order to justify medical absences. In his opinion the EDPS scrutinised the steps of the procedure which deserve close attention from a data protection point of view and made recommendations on several points, including the storage of data, handling of medical certificates, procedure for rectification of data and information of the concerned staff members.