Yes. Employers are Data Fiduciaries for employee data. Section 7(i) allows processing without consent for employment purposes and to safeguard the employer from loss or liability (for example preventing corporate espionage or maintaining confidentiality). For anything beyond that, such as marketing or sharing data with outsiders, the employer needs consent. Security safeguards and breach reporting apply as usual.