Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

Can I get contracts signed electronically if signatories are working remotely?

With the outbreak of coronavirus leading to a requirement for more employees to be working remotely, especially following Government advice that all non-essential travel including to and from work should be avoided, there has been an increased requirement for businesses to be more flexible in their approach to signing contracts.

The traditional approach has been for contracts to be printed and signed with a “wet ink” signature. However, this is not a strict legal requirement in the majority of circumstances and contracts can be formed without this degree of formality. English law recognises that contracts can be formed by electronic means – including the exchange of emails or the typing of a name into a document to signify agreement to it.

Whilst this approach offers a lot of flexibility, more sophisticated electronic signature tools are recommended for important documents, to enable the identity of the signatory to be validated and reduce the possibility of fraud.

If businesses are considering changing their contracting processes because of coronavirus, or because of a general shift towards paperless working, it is important to ensure that proper approval processes remain in place, and to consider whether a software tool should be used to complement them. Systems such as DocuSign are widely used.

There also remain some situations where legal advice is recommended before relying on an electronic signature:

  • Where the other party is abroad – as local laws that are different from English law might apply
  • If executing a deed – the law requires certain types of document to be executed as a deed (for example, transfers of land and powers of attorney), and the issues around electronic signature and witnessing are more complicated here
If an employee refuses to come into work is their absence unauthorised and do I have to pay them?

This would depend on the reason as to why the employee is refusing to come into work. An unauthorised absence is where an employee fails to attend work and they do not have a statutory or contractual right, or their employer’s permission, to do so. An employer will not be obliged to pay employees their normal pay for periods of unauthorised absence.

There are some absences which may be viewed as authorised which would entitle the employee to their full pay. For instance, employees who believe that they are in serious and imminent danger by coming to work would be entitled to stay at home and receive pay if their belief is deemed reasonable.

An employer should always try to discuss any unauthorised absences with an employee. They may then consider whether to take disciplinary action against the employee.

Are there specific examples given?

The guidance gives numerous examples of the types of performance adjustment which parties should consider. For example this includes:

  • Varying deadlines (e.g. for performance or payment)
  • Varying compensation (e.g. to recognise increased costs)
  • Varying the nature of performance (e.g. allowing substitute goods, allowing pert delivery of services)

The guidance also encourages a reasonable approach to enforcement, which might encourage delaying issuing formal proceedings, increased use of mediation or providing more information to the other party than would be volunteered under normal circumstances.

What should I be mindful of in relation to pregnant workers? Is there a right to suspend?

Yes, but as a last resort. In summary, the law requires employers:

  • to assess the workplace risks posed to new or expectant mothers or their babies;
  • to alter the employee’s working conditions or hours of work to avoid any significant risk to them;
  • where it is not reasonable to alter working conditions or hours, or would not avoid the risk, to offer suitable alternative work on terms that are not “substantially less favourable”;
  • where suitable alternative work is not available, or the employee reasonably refuses it, the employer should consider whether it is appropriate to suspend the employee on full pay.
What if you want to terminate the contract completely?

If changed circumstances mean that a business wants to exit from a contractual arrangement, then before trying to terminate it, a careful review should be carried out to see whether a right to terminate actually exists. For example:

  • Not every contract for the sale of goods contains the right for the buyer to terminate in circumstances where the supplier hasn’t done anything wrong. If a business has entered into a contract on the supplier’s standard terms, it is unlikely to contain any such provision
  • A contract for the provision of services is unlikely, if drafted by the customer, to contain a provision that allows the supplier to walk away from the arrangement at short notice, or perhaps at all

If a party tries to terminate a contract when it doesn’t have the right to do so, the other party will likely claim breach of contract and could sue for damages. In the case of a long term or high-value contract, this could amount to a very significant liability.

Even if the right to terminate the contract does exist, there might be particular rules about the following:

  • How much notice has to be given
  • How such notice has to be served (for example, it might have to be in writing to a particular address)
  • When the notice can be served (perhaps on an anniversary of the start of the contract)
  • How much a party has to pay if it cancels (for example, for raw materials, for work done to date, or even the whole contract price)

All of these factors must be taken into account, and any contractual processes for termination are followed.