• If the processing is based on a contract with the employee: If the processing relates to an employee who has a more prominent role in, for example, a video, the organization may choose to enter into a contract with the employee instead of consent. This is likely to require, firstly, that the employee receives some form of payment for their participation. Secondly, there must be a written agreement to demonstrate that the processing is carried out based on a contract. • If the processing is based on consent: take into account the risk that one or more of the employees appearing in the material may have to be removed. 111

Complycloud EU GDPR Report - Page 111 Complycloud EU GDPR Report Page 110 Page 112