If an employee has had a coronavirus test, can we require them to disclose evidence of their test results?
Obtaining an employee’s Covid-19 test result will amount to processing personal data for the purposes of the General Data Protection Regulation 2016/679 (GDPR) and information about an employee’s health is a special category of data (sensitive personal data under the Data Processing Act 2018 (DPA)).
In accordance with the GDPR and DPA, there must be lawful grounds for processing such information. Most employers rely on employees’ consent to obtain medical information and process sensitive personal data and if the employee is unwilling to give consent, you will not normally be entitled to the information.
Special category data can be processed lawfully if it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller. Employers may be able to require an employee to disclose their Covid-19 test if there is a substantial public interest, such as ensuring that the employee self-isolate if they have a positive test. However, there is a risk that this measure could be considered disproportionate particularly if it is enforced on all employees as a blanket measure.
Related FAQs
- Remember that employees will also be making contributions on any reduced wage under the Coronavirus Job Retention Scheme. The amount contributed may be less, but the contribution rate will be the same, unless the following applies.
- Employees may reduce their DC employee contributions if their scheme rules allow them to do so, but no further than the statutory minimum if the scheme qualifies as the employer’s auto-enrolment vehicle.
- Employees might choose to opt-out or cease active membership of their scheme, which might cause a spike in administration at a time when administrators are likely to be understaffed. It is important that employers remember they must not do anything to encourage or induce employees from leaving an auto-enrolment vehicle as this may constitute an offence.
- Employees who leave their scheme in this way will have to be re-enrolled in due course as and when required by law.
- For DB schemes, specific considerations apply (see the last section, below).
Employees on any type of employment contract including full-time, part-time, agency, flexible or zero hours and foreign nationals who are eligible to work in the UK on any visa can be furloughed subject to the following excluded categories:
- Anyone who was not employed prior to 30 October 2020
- Anyone for whom you haven’t made a PAYE Real Time Information submission to HMRC between 20 March 2020 and 30 October 2020.
- Employees who are working but on reduced hours or for reduced pay
- Employees currently receiving SSP (see FAQ on SSP and self-isolation below)
- Public sector employees
- Employees of businesses or organisations in receipt of public funding for staff costs (except for those who are not primarily funded by the government and whose staff cannot be redeployed to assist with the Covid-19 response)
Yes, if they are paid via PAYE. This includes agency workers engaged under umbrella companies.
The furlough should be agreed between the agency (the employer) and the worker and documented in accordance with the guidance. It is recommended that the decision to furlough is discussed with end user clients. Just like other employees, agency workers cannot perform work through or on behalf of the agency while furloughed. This includes work for the client.
For agency staff working under umbrella companies, it is for the umbrella company and the agency worker to agree on furloughing the worker.
Office holders who provide services under an intermediary (such as a service company consultancy agreement) and whose services relate to the office held, would fall under the IR35 regime and must be assessed accordingly.
- The Pensions Regulator has published regularly-updated guidance for employers.
- It will take “a proportionate and risk-based approach towards enforcement decisions … with the aim of supporting both employers and savers”. In other words, the law remains the same, but the Regulator will show restraint in enforcement against breaches.