Posted By Lumpy I think your company needs to review the Data Protection Act. Holding info on where employees went on holiday for no "valid" reason would undoubtedly be a breach. Healthcare Employees do not have to provide such info, and I can see no justification for your company. What happens if an employee refuses to give such info ... remember they have Human Rights to a private life ? Very questionable process if you ask me.