Do I need a privacy policy now for a site that contains the data of company employees?

Question

Law in IT

Recently, at one of the forums, there was a conversation with a lawyer for personal data, during which the statement was made that now the privacy policy should be posted in any case if the site contains personal data of company employees (name, social networks, phone), even if there are no forms data processing.
I strongly doubted this statement, but did not find clear information.
Gentlemen, IT lawyers, please clarify the issue.

Answer 1

You mixed what I think is warm with soft.
The fact that you post data about your employees is an agreement of the employee himself to use his information. It must be clearly signed otherwise this is a violation of rights and you can be sued.
The privacy policy is for users of your site to know how you treat their data, how to revoke permission, etc.