This chapter discusses the law on privacy and confidentiality in the workplace. It looks at the four statutes which relate directly to issues of workplace confidentiality: the GDPR/Data Protection Act 2018, the Public Interest Disclosure Act 1998 (which deals with whistleblowing), the Regulation of Investigatory Powers Act 2000, and the Telecommunications (Lawful Business Practice) (Interception of Communications) Regulations 2000. It also considers two other areas of law which are influences in this area: the law on job references and the law on restricting the activities of former employees. Also discussed is the impact of the Human Rights Act in this area.