Turn UK Data Protection Act 2018 Into an HR Quick-Reference Guide

Summarise the key obligations under the UK Data Protection Act 2018 that apply to employers handling employee data. Write for an HR manager with no legal training — use plain, practical English, avoiding legal jargon. Include: 1. The main data protection principles and what they mean in an HR context. 2. The lawful bases most relevant to employee data. 3. Guidance on transparency, retention, security, and data subject rights. 4. Common risks or mistakes employers should avoid. Structure the response with clear headings or bullet points so it can be used as a quick reference guide.