How much data can I gather?
You also need to consider other aspects of data protection.
Be proportionate – only gather and use Covid-19 data where you need to.
Keep data to a minimum – you shouldn’t gather more data than you need. You need to know someone has Covid-19 but you don’t need to know all their symptoms. Data minimisation also applies to who gets access to the data. It’s unlikely that a spreadsheet, accessible to everyone updating them on the health status of all employees, would be appropriate. Data should be shared on a need to know basis. You need to balance the privacy of individuals against your duty of care to be responsible with regards to the data of your employees, visitors, customers and suppliers.
Keep it up to date – make sure you update data. People’s health status will change and if you keep a record of this, you need to make sure it is accurate and up to date (although this doesn’t mean you should batter individuals with constant requests for updates on health status. Again, be proportionate).
Identify individuals only when you need to – although you will need to know who has Covid-19, that doesn’t mean you need to tell everyone in the organisation. As soon as you can, you should remove personal data from any information you gather. For example, you might want to update employees on the health status of their fellow employees but you probably don’t need to name individuals and even if you feel it is necessary, you should keep the information you provide to a minimum. Removing personal identifiers in a document is also a good data security technique.
Keep the Covid-19 health data secure – Covid-19 data will be special category data and deemed high risk. This means that if you have a breach of this data you will need to notify it to the ICO. A breach could happen by someone losing a print-out of the names of Covid-19 employees, customers or visitors. It could also happen if you set access rights to lists of Covid-19 sufferers open to more people than need to know the information. The risk of ICO enforcement action increases with the potential harm the disclosure could cause. Although the ICO has indicated that it will be understanding about the impact of Covid-19 on normal operations, this doesn’t mean that they will not prosecute you if the breach is sufficiently serious.
Destroy the data once you don’t need it – Finally, of course, make sure that you delete data at the end of your needs. This might last longer than the pandemic, for example if you have an insurance claim or ongoing litigation. If you do need to keep it, consider whether or not you can delete some of the data to minimise what you hold.
Related FAQs
On 7 May the Government published guidance on how contracting parties can act responsibly in order to assist the effort to deal with Covid-19. The guidance seeks to persuade contracting parties to act reasonably and recognise the impact of Covid-19 on contractual counterparties. This will continue to be relevant as business begins to emerge from lockdown.
As discussed above, Covid-19 will inevitably deplete the workforce of housing providers in the foreseeable future. It would be prudent to consider making short-term policy changes to deal with this situation and manage the expectations of tenants going forward. A key policy change to consider is the extension of the standard lead-time for completing all non-urgent repairs and inform tenants of this change.
Such a change will also reduce pressure on landlords and front-facing staff.
As above, employers must protect the interests of their staff, particularly regarding health and safety. Extra care should be exercised when assessing the level of emergency of a repair on a case by case basis. All efforts should be made to reduce the number of attendances at properties by repair staff, whilst keeping all tenants safe.
As ever, communication is key – the pandemic cannot be used as a blanket excuse for abstaining from all duties and obligations. Housing providers must take a pragmatic approach in safeguarding customers whilst considering the interests of is workers. Maintaining lines of communication with all parties remains paramount.
As with a Will, your solicitor can take instructions by telephone, Skype or a similar tool. Your solicitor can then post or email the documentation to you. As with Wills, your signature and those of your proposed Attorneys will need to be witnessed, but in this case only by one other person. However, there are specific requirements as to who can witness your signature. The witness must be aged 18 or older and cannot be your Attorney but they can be your Certificate Provider.
Your Certificate Provider must either be someone you have known personally for at least two years or an appropriate professional. However, they must not be your Attorney and they must not be a member of your family or the partner, boyfriend or girlfriend of a member of your family or a business partner or employee of yours.
Also, if you are living in a care home, the Certificate Provider cannot be the owner, manager, director or employee of the home you live in.
Given the current restrictions on movement, if you have regular medical checks you could ask your GP or another medical professional to witness your signature and act as your Certificate Provider when you go to see them or they come to you. Alternatively, if someone you have known for two years or more is dropping off essentials, they could act as a witness and Certificate Provider remembering to retain the necessary distance and protective measures.
Concerning your Attorney(s) you cannot act as their witness. Otherwise, anyone aged 18 or older can act as their witness, including the other Attorney. Ideally, a witness to your or your Attorney’s signatures should not be a family member for the sake of impartiality and to avoid disputes. If necessary they can be.
Many employees require flexible working now more than ever. That could be reduced hours, working from home, reduced days, etc. Be careful to act fairly when considering these requests as they can be a discrimination claim in the waiting.
A flexible working request is a request for a permanent change to the contract of employment however to encourage a greater take up during this difficult time, you can agree this on a temporary basis.
It is absolutely critical to creating a safe workplace and to making workers feel secure.
This could include floor markings every 2m (as we’ve seen in grocery stores), stopping or limiting/staggering access to communal or common areas such as toilets and kitchens, rearranging workstations to maintain a 2 metre distance or, where this is not possible (for example in manufacturing facilities or production lines), erecting physical barriers and avoiding face to face working, encouraging the use of stairs and discouraging lift-use, designing a one-way system for entry and exit and looking at aircon/heating systems to see if any modifications are possible to prevent the spread of airborne particles. If you can increase ventilation in your workplace, it will help reduce risk.
The government has published detailed social distancing guidance for workplaces across sectors including manufacturing, retail, offices, construction and transport; it has also promised to continue to add to this.