Skip to content

Can I collect health data in relation to Covid-19?

Yes. With respect to employees you have an obligation to protect their health so you can gather information to do that. You might gather information from your employees on who has the virus, who has had it and recovered and also who has tested negative. You might also want to know if individuals have been in contact with someone who has it or if they are in a vulnerable group. It is reasonable to want to know where individuals have travelled. In the future it may also be reasonable to know if they are planning to travel to a virus hot spot, as the impact of the virus around the world is likely to continue for some time even after the outbreak has been contained in the UK.

It is reasonable to gather some information about visitors to your site, be they customers or suppliers, as this information will also help protect your staff. However, you should keep what you gather to a minimum. For visitors, it’s unlikely that you need to know anything more than they have Covid-19, are displaying symptoms or have recently been in contact with someone who has the virus.

Related FAQs

What amounts to a dismissal?

For the purposes of collective consultation, making someone redundant and/or changing terms and conditions of employment, by termination and re-engagement, is also classed as a dismissal by reason of redundancy and so has the exact same consultation requirements.

If an employee has had a coronavirus test, can we require them to disclose evidence of their test results?

Obtaining an employee’s Covid-19 test result will amount to processing personal data for the purposes of the General Data Protection Regulation 2016/679 (GDPR) and information about an employee’s health is a special category of data (sensitive personal data under the Data Processing Act 2018 (DPA)).

In accordance with the GDPR and DPA, there must be lawful grounds for processing such information. Most employers rely on employees’ consent to obtain medical information and process sensitive personal data and if the employee is unwilling to give consent, you will not normally be entitled to the information.

Special category data can be processed lawfully if it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller. Employers may be able to require an employee to disclose their Covid-19 test if there is a substantial public interest, such as ensuring that the employee self-isolate if they have a positive test. However, there is a risk that this measure could be considered disproportionate particularly if it is enforced on all employees as a blanket measure.

Can I demand that my employees have the vaccine?

In most circumstances the answer will be no. It would be an infringement of their human rights. It could also be a criminal assault.

However where there is a high risk to employees of exposure to COVID-19, such as care homes and healthcare environments, you might be able to make it a requirement of their role to have the vaccine.

First, consider whether you need to have a blanket requirement covering all employees or whether only certain groups who work in the most high risk areas require the vaccine.

You will need to do a thorough risk assessment balancing the amount that the risk of exposure would be reduced against the interference with the employee’s human rights. Consideration will need to be given as to whether insisting on the vaccine is proportionate to the risk and whether other less invasive steps could be taken instead, such as maintaining social distancing, wearing a mask, washing hands.

Any requirement for employees to be vaccinated should be communicated clearly to employees and trade unions together with a clear explanation for why it is necessary.

What is the amendment to The Working Time legislation called?

The government introduced The Working Time (Coronavirus) (Amendment) Regulations 2020 to amend the Working Time Regulations 1998 to allow for the change.

What is the Clinical Negligence Scheme for Coronavirus?

The Government has recently passed the Coronavirus Act 2020 in a response to the challenges posed by the pandemic, especially in relation to those facing the NHS during this time of crisis.  NHS Resolution worked closely with the Department for Health and Social Care to draft a clause within the Coronavirus Act providing indemnity for clinical negligence for any coronavirus related activity not currently covered by an existing arrangement.  In order to implement this clause, NHS Resolution has launched the Clinical Negligence Scheme for Coronavirus (“CNSC”).

It is intended that the CNSC will cover new contracts put in place for healthcare arrangements to respond to coronavirus, such as organisations supporting testing arrangements or Independent Contractors making agreements with NHS England and NHS Improvement to release capacity to the NHS.  Membership is not required for this scheme and the contracts entered into will automatically provide indemnity under the scheme.

The CNSC will not replace existing indemnity provisions made under the Clinical Negligence Scheme for Trusts (“CNST”) and it has been confirmed that the new Nightingale Hospitals will be covered by CNST rather than CNSC.  Similarly, NHS Resolution have confirmed that those doctors and nurses returning to practice from retirement, or those joining as students will be covered by the CNST or, where applicable the Clinical Negligence Scheme for General Practice (“CNSGP”).  The CNSC will not cover returning midwives to the profession, but the Royal College of Midwives have confirmed that they will extend all of the benefits of membership including Medical Malpractice Insurance to returning retired midwives.

For more information regarding this please click here.