How much data can I gather?
You also need to consider other aspects of data protection.
Be proportionate – only gather and use Covid-19 data where you need to.
Keep data to a minimum – you shouldn’t gather more data than you need. You need to know someone has Covid-19 but you don’t need to know all their symptoms. Data minimisation also applies to who gets access to the data. It’s unlikely that a spreadsheet, accessible to everyone updating them on the health status of all employees, would be appropriate. Data should be shared on a need to know basis. You need to balance the privacy of individuals against your duty of care to be responsible with regards to the data of your employees, visitors, customers and suppliers.
Keep it up to date – make sure you update data. People’s health status will change and if you keep a record of this, you need to make sure it is accurate and up to date (although this doesn’t mean you should batter individuals with constant requests for updates on health status. Again, be proportionate).
Identify individuals only when you need to – although you will need to know who has Covid-19, that doesn’t mean you need to tell everyone in the organisation. As soon as you can, you should remove personal data from any information you gather. For example, you might want to update employees on the health status of their fellow employees but you probably don’t need to name individuals and even if you feel it is necessary, you should keep the information you provide to a minimum. Removing personal identifiers in a document is also a good data security technique.
Keep the Covid-19 health data secure – Covid-19 data will be special category data and deemed high risk. This means that if you have a breach of this data you will need to notify it to the ICO. A breach could happen by someone losing a print-out of the names of Covid-19 employees, customers or visitors. It could also happen if you set access rights to lists of Covid-19 sufferers open to more people than need to know the information. The risk of ICO enforcement action increases with the potential harm the disclosure could cause. Although the ICO has indicated that it will be understanding about the impact of Covid-19 on normal operations, this doesn’t mean that they will not prosecute you if the breach is sufficiently serious.
Destroy the data once you don’t need it – Finally, of course, make sure that you delete data at the end of your needs. This might last longer than the pandemic, for example if you have an insurance claim or ongoing litigation. If you do need to keep it, consider whether or not you can delete some of the data to minimise what you hold.
Related FAQs
The GMC recognises the challenges the doctors may face as the situation continues to develop. This includes concerns about the risks to the health of the doctors when treating patients with coronavirus. Doctors should follow the current public health advice including self-isolating if they know or suspect that they are infected or are at a higher risk of infection.
Finally, all necessary steps should be taken to ensure that doctors have access to protective equipment and minimise the risk of transmission when treating patients. It is imperative that a record is kept of all decisions made and how any safety or health concerns have been handled.
The GMC continues to work with NHS England and UK’s Chief Medical Officers to provide updates and advice to all doctors as the situation develops. Click here for more information.
During these unusual times, we are all having to adapt to what has become the ‘new normal’ and implement changes in how we carry out civil cases. If you are to give evidence in a remote hearing, whether this is by Microsoft Teams, Skype for Business or the Cloud Video Platform, we have pulled together a quick and useful guide below on what would be expected by the courts:
Before the hearing
- Make sure that you have access to the video-conferencing software that will be needed for the hearing. We will tell our clients and their witnesses in advance which platform will be used. The courts have increasingly been using Skype for Business to conduct the hearings (but you may find other platforms being used)
- Test that your camera and microphone are working and it is clear to see/hear you.
- Dress appropriately, as if it was an in-person hearing, and use the same formalities.
- Ensure that the background which is visible on your screen is appropriate and allows for your face to be clearly seen. A ‘blur background’ option may also be available on your settings which you may prefer.
- Make sure that your mobile phone is on silent and you are in a location where there will be no/minimal distractions. You should be on your own in a room when giving evidence, however, as we have all experienced with working from home, sometimes interruptions such as children appearing cannot be avoided.
- Join the call ahead of the allocated time, in order to allow for any small technical difficulties.
During the hearing
- Have a copy of the hearing bundle to hand, so that you can follow the proceedings (this may be in hard copy or soft copy). You are not allowed any other notes or papers, whether hard copy or electronic, in front of you when giving evidence.
- Unless addressing the Judge or you have been directly asked a question, keep your microphone muted.
- When giving evidence, you must make sure both your camera and your microphone are switched on.
- Remote hearings can be difficult and if you do not understand or you do not hear a question properly, then do ask for the question to be repeated/re-framed.
- You should not move away from the screen without permission from the Judge. The Judge will allow time for breaks.
- Address the judiciary and other advocates the same way as you would if you were in a physical courtroom.
- It is permitted to drink water throughout the hearing, but mugs of tea and/or coffee are probably best avoided. It is also not permitted to eat food during the hearing.
- Don’t panic if someone walks into the room or the dog starts barking because there is a knock at the door. Judges are only too aware about what might happen. Communication is key and if the interruption has interfered with your train of thought or the evidence you are giving then do say so.
- Be aware that all evidence is recorded and that a transcript of all evidence can be obtained at a later date.
Many charities have money that are considered restricted funds which are given to the charity or raised for a specific purpose. The Charity Commission gives guidance on this, please see the link below. Depending on the circumstances in which these monies have been given to a charity or raised you may or may not be able to use them.
Monies raised in an appeal or specific fund raising campaign are unlikely to be available as it is likely to be impossible to get the permission of the donor to change the use. If however you have had monies donated for a specific purpose and you can identify the donor you can use these funds for general overheads and to pay wages etc. if you receive the donor’s specific permission to do so.
If it is not possible to find work for the employee to do at home, you do have the option of putting the employee on furlough.
The financial implications of having to repay all deposits and advance payments could be very serious for some businesses. As an alternative to a refund, many are offering customers the opportunity to re-book at a later date, or a voucher that can be redeemed against a subsequent booking.
The CMA’s view on this practice is that consumers can in many situations be offered alternatives of this type, but they should not be “misled or pressured” into accepting this. Their view is that a refund should be an option that is just as clearly and easily available. The CMA also points out that any restrictions that apply to credits, vouchers, re-booking or re-scheduling, such as the period in which credits must be used or services re-booked, must also be fair and made clear to consumers.
The full CMA guidance re “The Coronavirus (Covid-19) pandemic, consumer contracts, cancellation and refunds” can be found here.