An official response from Bestcare Manpower Services
In an era of increasingly stringent data protection regulation, managing the personal data of outsourced employees responsibly is both a legal imperative and an ethical obligation. Bestcare Manpower Services is committed to full compliance with applicable data privacy laws — and to ensuring that our clients are protected in this regard as well.
The Regulatory Landscape
Depending on the jurisdiction, outsourcing arrangements may fall under data protection frameworks such as the Kenya Data Protection Act, South Africa’s POPIA, the EU GDPR, or equivalent national legislation. These laws govern how personal information about workers is collected, stored, processed, shared, and disposed of.
Both Bestcare (as the employer of record) and the client (as a party who receives and processes employee data) may qualify as data controllers or processors under these frameworks. Understanding this distinction is critical.
How Bestcare Manages Employee Data
Our data privacy practices include:
- Informed Consent — Every candidate and employee provides informed consent for the collection and processing of their personal data before any information is gathered.
- Purpose Limitation — Personal data collected from workers is used only for legitimate employment purposes — placement, payroll, compliance, and HR management. It is never sold, shared unnecessarily, or used for unrelated purposes.
- Secure Storage — Employee records are stored in password-protected, access-controlled systems. Physical files are kept in locked, restricted-access storage.
- Data Minimisation — We collect only the personal information that is necessary for the employment and placement process — nothing more.
- Retention and Disposal — Records are retained for the legally prescribed periods and disposed of securely thereafter, whether in physical or digital form.
“The people who work through Bestcare trust us with some of their most sensitive personal information. That trust is not taken lightly. Our data privacy standards are designed to protect workers’ rights and to keep our clients on the right side of the law.”
— The Director and Team, Bestcare Manpower Services
Guidance for Clients
Clients who access outsourced worker data as part of the engagement — such as attendance records or performance reports — must handle that data in accordance with applicable privacy legislation. Bestcare provides guidance on these obligations as part of our onboarding process.
For more information on data privacy compliance in our outsourcing model, contact Bestcare Manpower Services today.