Skip to content

If an employee has had a coronavirus test, can we require them to disclose evidence of their test results?

Obtaining an employee’s Covid-19 test result will amount to processing personal data for the purposes of the General Data Protection Regulation 2016/679 (GDPR) and information about an employee’s health is a special category of data (sensitive personal data under the Data Processing Act 2018 (DPA)).

In accordance with the GDPR and DPA, there must be lawful grounds for processing such information. Most employers rely on employees’ consent to obtain medical information and process sensitive personal data and if the employee is unwilling to give consent, you will not normally be entitled to the information.

Special category data can be processed lawfully if it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller. Employers may be able to require an employee to disclose their Covid-19 test if there is a substantial public interest, such as ensuring that the employee self-isolate if they have a positive test. However, there is a risk that this measure could be considered disproportionate particularly if it is enforced on all employees as a blanket measure.

Related FAQs

What about someone who refuses because they are against the vaccine (the anti-vaxers)?

It is a theoretical possibility that “anti-vax” beliefs could be a philosophical belief under the Equality Act 2010 and therefore anti-vaxers have the right not to be discriminated against for their beliefs. Much will depend on why the individual is against the vaccine. Conspiracy theorists (the vaccine is being used as an opportunity to monitor you or it’s all because of 5G) are highly unlikely to be treated as having a philosophical belief!

What is the NICE guidance around clinical decision-making?
  • Be alert to the fact that guidance on treating Covid-19 may change with emerging knowledge/scientific data and this may require subsequent modifications to treatment.
  • Critical care staff should support healthcare professionals who do not routinely work in critical care but need to do so.
What are my potential liabilities if a customer, supplier or other visitor contracts Covid-19 on my premises?

As an occupier of premises, you owe a duty of care to your visitors to take reasonable care to see that the visitor will be reasonably safe in using your premises.

It is therefore essential that you are taking reasonable steps and strictly adhering to up-to-date Government advice in all aspects of your business to avoid any potential liability.

Failure to follow Government advice could leave you vulnerable to claims for compensation for pain and suffering should a visitor on your premises contract Covid-19.

However, each case will be fact-specific and it would be very difficult for a visitor to establish that they contracted Covid-19 specifically from those premises (as opposed to being exposed to the virus anywhere else).

If someone suggests that they are going to make a claim make sure that you report matters to your insurer or insurance broker immediately.

Do leaseholders who have more than three properties in the UK have to pay the full contribution for building safety works and is there a way of finding out how many properties out leaseholders have in the UK?

The first point to note is that it is the position as at 14 February 2022 which is relevant, as whether or not a lease is a ‘qualifying lease’ for the purposes of recovering costs under the Building Safety Act was effectively frozen at that time.

If a leaseholder owned more than three properties in the UK (and the property in question was not their principal home) at that time, then the lease will not be a qualifying lease. The protections under the Act which prevent or restrict the landlord’s ability to recover the cost of remedial works through the service charge will not therefore apply to that lease (save potentially for the provision that costs cannot be recovered where the landlord is responsible for the defects, which does not expressly refer to qualifying leases).

The lack of a searchable database to assess how many properties a leaseholder has in the UK is however one of the difficulties to be resolved in this regard, as there is currently no way of searching the Land Registry to obtain a list of properties owned by one individual. The guidance appears to rely on the leaseholder completing the leaseholder deed of certificate being open and honest in this regard, and that deed of certificate being passed onto subsequent owners. Making false representations or failing to disclose required information in the deed of certificate may be a criminal offence, although reliance on this to discourage mis-reporting is clearly less satisfactory than having a searchable register.

Can I demand that my employees have the vaccine?

In most circumstances the answer will be no. It would be an infringement of their human rights. It could also be a criminal assault.

However where there is a high risk to employees of exposure to COVID-19, such as care homes and healthcare environments, you might be able to make it a requirement of their role to have the vaccine.

First, consider whether you need to have a blanket requirement covering all employees or whether only certain groups who work in the most high risk areas require the vaccine.

You will need to do a thorough risk assessment balancing the amount that the risk of exposure would be reduced against the interference with the employee’s human rights. Consideration will need to be given as to whether insisting on the vaccine is proportionate to the risk and whether other less invasive steps could be taken instead, such as maintaining social distancing, wearing a mask, washing hands.

Any requirement for employees to be vaccinated should be communicated clearly to employees and trade unions together with a clear explanation for why it is necessary.