Can I be fined for failing to take steps to try to ensure that my staff comply with the requirements to self-isolate?
Yes.
An employer which is aware that a worker or agency worker is or ought to be self-isolating, should not knowingly allow that worker or agency worker to leave the place that they are self-isolating in (“the designated place”). To do so without reasonable excuse would amount to an offence which could result in the employer being issued with a fixed penalty notice.
The value of the fixed penalty varies depending on if it is the first or subsequent fixed penalty notice to be issued:
| First fixed penalty notice | £1,000 |
| Second fixed penalty notice | £2,000 |
| Third fixed penalty notice | £4,000 |
| Fourth, and any subsequent fixed penalty notice | £10,000 |
Related FAQs
The obvious option to reduce the cost of your workforce is redundancy. However, that also reduces the number of employees and therefore your capacity.
Employers will be collecting and sharing health information. Health information is sensitive and higher data protection standards apply. Here are a few key pointers.
- Update privacy notices to cover the new collection and sharing of employees’ information and provide these to the workforce. Be transparent and fair.
- Identify the legal basis and condition for use of this information and put any required paperwork in place. The ICO guidance will help. For some conditions such as the employment condition, an Appropriate Policy Document (APD) will be required. The ICO has an APD template.
- Only use the information for the purpose of managing the workforce during the pandemic.
- Only collect or share information if it’s necessary – if it’s a targeted and proportionate way of achieving your purpose.
- Make sure any health information collected and shared is accurate – there may be serious consequences if it’s not.
- Work out how long the information must be kept for. Keep a record of that period and act on it at the appropriate time.
- Security is very important – there may be malicious actors trying to trick employers and employees. Make sure employees know how to identify a genuine NHS Test and Trace contact. Keep the information secure. Use the ICO’s data sharing checklists** and keep a record of the disclosures made and why. Control external disclosures – only certain authorised members of staff should make them.
- Make sure individuals can still exercise their data protection rights – that’s also very important. Keep data protection records up-to-date and ensure any exports of personal information outside the UK are compliant.
- Before introducing employer-led testing like taking temperatures, thermal imaging or other potentially intrusive tests, work out if a data protection impact assessment (DPIA) is required. It will be if the intended processing is ‘high risk’. If it is, then carry out a full DPIA. It will help address the issues systematically and mitigate risks.
- All this demonstrates ‘accountability’ – it shows affected individuals and the ICO that the employer is complying with data protection requirements.
If you need further help, please visit the ICO’s data protection and coronavirus information hub or ask our data protection team.
** Please note that this link is to the ICO’s existing checklists and data sharing code of practice. We will update the link to the ICO’s new checklists after they are published.
You should speak to your advisors. We do not know presently how existing petitions will be dealt with by the Court. We do know that if any winding up order is made (based on a petition presented after 27 April), it could be found to be void and a creditor may face challenges. Even for petitions presented before 27th April, there is a risk that the Court will not be keen to make a winding up order so it is important that you look at the facts of your debt and weigh up all of the factors before deciding how to proceed.
The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/
Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.
You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.
Employees on any type of employment contract including full-time, part-time, agency, flexible or zero hours and foreign nationals who are eligible to work in the UK on any visa can be furloughed subject to the following excluded categories:
- Anyone who was not employed prior to 30 October 2020
- Anyone for whom you haven’t made a PAYE Real Time Information submission to HMRC between 20 March 2020 and 30 October 2020.
- Employees who are working but on reduced hours or for reduced pay
- Employees currently receiving SSP (see FAQ on SSP and self-isolation below)
- Public sector employees
- Employees of businesses or organisations in receipt of public funding for staff costs (except for those who are not primarily funded by the government and whose staff cannot be redeployed to assist with the Covid-19 response)