5. Personnel system: conclusion

This is quite a comprehensive list of records that need to be kept. The control system may be paper based but will normally include a database component as well.

All this personal and sensitive information comes under the Data Protection Act. For example:

• The information must be reviewed periodically to ensure that it is still correct.
• The information must be kept secure so only authorised people can see it.

The personnel control system may be part of a larger Management Information System (MIS). The MIS system makes it easier to link records across different areas such as Finance. The MIS system has to ensure that only authorised staff are able to access personal records.