Can I collect health data in relation to Covid-19?

As a result of the CJRS being extended, the Job Retention Bonus will no longer be paid in February 2021.

Under CBILS, for the purposes of calculating the applicant’s annual turnover, approved lenders have been aggregating turnover across the whole of the private equity investor’s portfolio meaning they failed to qualify for the scheme as they were deemed to exceed the £45 million threshold.

For private equity-backed businesses, the removal of the upper limit on annual turnover criteria for CLBILS seemingly avoids the issue of turnover aggregation across investment portfolios seen with the CBILS, potentially enabling more private equity sponsor portfolio companies to be able to access the CLBILS funding.

We hope that all organisations will come out of lockdown successfully. However, the current economic crisis means that many organisations will face very difficult trading conditions.

Employment costs are one of, if not the, largest cost to your organisation. These costs will have an effect on your financial well-being – and many organisations are now considering how to reduce employment costs. That said, your workforce is also your most important asset and as we get back to business, you will need your workforce to run the organisation, produce your goods, deliver your services and deal with your customers.

As a result, many organisations are facing a very difficult situation – how to reduce or flex the cost of the workforce whilst also maintaining an ability to service customers. This difficulty is enhanced by the uncertainty of when the pandemic will be controlled and the threat of lockdowns end.

Obtaining an employee’s Covid-19 test result will amount to processing personal data for the purposes of the General Data Protection Regulation 2016/679 (GDPR) and information about an employee’s health is a special category of data (sensitive personal data under the Data Processing Act 2018 (DPA)).

In accordance with the GDPR and DPA, there must be lawful grounds for processing such information. Most employers rely on employees’ consent to obtain medical information and process sensitive personal data and if the employee is unwilling to give consent, you will not normally be entitled to the information.

Special category data can be processed lawfully if it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller. Employers may be able to require an employee to disclose their Covid-19 test if there is a substantial public interest, such as ensuring that the employee self-isolate if they have a positive test. However, there is a risk that this measure could be considered disproportionate particularly if it is enforced on all employees as a blanket measure.