Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

Can I ask for relief from KPIs or service credits under a contract with a public sector body if the Covid-19 outbreak means that I am having difficulty in performing it?

The Cabinet Office has published a useful Procurement Policy Note (“PPN”) on relief available to suppliers due to Covid-19 (available here). In brief, you should not be penalised by a public sector body, if, in the current circumstances, you are unable to comply (fully or partly) with your contractual obligations. Public sector bodies are expected to work with suppliers and, if appropriate, provide relief against current contractual terms. This is in order to maintain business and service continuity and avoid claims being accepted for other forms of contractual relief, such as the occurrence of a force majeure event.

The types of relief that may be available to suppliers to the public sector will depend on the existing contracts in place. Some contracts may have a payments by result mechanism, whereas others may be based on certain key performance indicators (KPIs) being met. Other contracts may not include any such mechanisms and therefore it will be a matter for discussion between suppliers and the public sector body.

The PPN provides that, rather than a supplier seeking to invoke a clause that would permit the supplier to suspend performance of its obligations (such as a force majeure clause), public sector bodies should first work with the supplier to amend or vary the contract. Any changes should be limited to the particular circumstances and considered on a case-by-case basis. Changes could include:

  • Amending the contract requirements
  • Varying timings of deliveries
  • Relaxing KPIs or service levels
  • Extending time for performance (e.g. revising a contract delivery plan), and/or
  • Preventing the public sector from exercising any rights or remedies against the supplier for non-performance (e.g. liquidated damages or termination rights).

These should only be temporary variations and the contract should return to the original terms once the impact of the Covid-19 outbreak on the contract has ended. Discussions with the public sector body about any changes that are agreed should be documented, in a variation signed by both parties.

A public sector may also need to take account of regulation 72 of the Public Contract Regulations 2015, to ensure that any changes to a contract (even of a temporary nature) do not trigger a requirement to conduct a new tender process. Whilst this may be unlikely to be the case with temporary variations, suppliers should still bear this in mind when discussing any changes to a contract with a public sector body.

If you are a supplier to a public sector body and you are currently struggling to meet your contractual obligations, we recommend that you take legal advice as to whether it might be possible to take advantage of the flexible approach that the PPN requires public sector bodies to adopt – it could be that you can avoid service credits or other financial deductions, or the need to serve formal notices such as “force majeure” or other relief notices.

 

 

Is the Land Registry functioning?

Yes. The Land Registry published a new service update on 14 May, here:

https://www.gov.uk/guidance/coronavirus-covid-19-impact-on-hm-land-registrys-service

Importantly, the Land Registry will process registrations where documents have been executed using the Mercury signing approach:

For land registration purposes, a signature page will need to be signed in pen and witnessed in person (not by a video call). The signature will then need to be captured, with a scanner or a camera, to produce a PDF, JPEG or other suitable copy of the signed signature page. Each party sends a single email to their conveyancer to which is attached the final agreed copy of the document and the copy of the signed signature page.

To summarise some further points:

  • Most information enquiries are experiencing minimal delays
  • Registrations of new titles, such as on sales of part or new leases, and applications to update existing titles, are experiencing more significant delays but can be expedited via the expedite service
  • Cancellation dates for replying to requisitions are extended until further notice
  • Access to free documents on the land registry portal has been extended to 90 days from completion of the transaction
  • Identity requirements have been relaxed. The Land Registry will now raise a requisition for identity documents, and not cancel applications
  • Requests for extensions to a notice or objection period will be granted if lawfully possible
  • Land charges searches can be submitted electronically with PDF documents
What is the guidance in relation to the Mental Capacity Act 2005 and Deprivation of Liberty Safeguards during the Covid-19 pandemic?

The Department of Health & Social Care has published guidance for hospitals, care homes and supervisory bodies on the Mental Capacity Act 2005 (MCA) and Deprivation of Liberty Safeguards (DoLS) during the coronavirus pandemic.

In many scenarios created or affected by the pandemic, decision makers in hospitals and care homes will need to decide:

  • if new arrangements constitute a ‘deprivation of liberty’ (most will not), and
  • if the new measures do amount to a deprivation of liberty, whether a new DoLS authorisation will be required (in most cases it will not be).

If a new authorisation is required, decision makers should follow their usual DoLS processes, including those for urgent authorisations.

A summary of the key points to be taken from the guidance is outlined below:

Use of the MCA and DoLS due to Covid-19

  • During the pandemic, the principles of the MCA and the safeguards provided by DoLS still apply.
  • It may be necessary to change the usual care and treatment arrangements, for example to provide treatment for people with Covid-19, to move them to a new hospital or care home to better utilise resources or to protect them from becoming infected.
  • All decision makers are responsible for implementing the emergency Government health advice  and any decision made under the MCA must be made in relation to a particular individual, it cannot be made in relation to groups of people.

Best interest decisions

  • In many cases, a best interests decision will be sufficient to provide the necessary care and treatment for a person who lacks the capacity to consent to the care and/or treatment arrangements during this emergency period.
  • If an individual has made a valid and applicable advance decision to refuse the treatment in question, then the relevant treatment, even for Covid-19, cannot be provided.

Delivering life-saving treatment

  • Where life-saving treatment is being provided in care homes or hospitals, including for the treatment of Covid-19, then the person will not be deprived of liberty as long as the treatment is the same as would normally be given to any person without a mental disorder.
  • The DoLS will therefore not apply to the vast majority of patients who need life-saving treatment who lack the mental capacity to consent to that treatment, including treatment to prevent the deterioration of a person with Covid-19.

The full guidance can be found here.

Can I get contracts signed electronically if signatories are working remotely?

With the outbreak of coronavirus leading to a requirement for more employees to be working remotely, especially following Government advice that all non-essential travel including to and from work should be avoided, there has been an increased requirement for businesses to be more flexible in their approach to signing contracts.

The traditional approach has been for contracts to be printed and signed with a “wet ink” signature. However, this is not a strict legal requirement in the majority of circumstances and contracts can be formed without this degree of formality. English law recognises that contracts can be formed by electronic means – including the exchange of emails or the typing of a name into a document to signify agreement to it.

Whilst this approach offers a lot of flexibility, more sophisticated electronic signature tools are recommended for important documents, to enable the identity of the signatory to be validated and reduce the possibility of fraud.

If businesses are considering changing their contracting processes because of coronavirus, or because of a general shift towards paperless working, it is important to ensure that proper approval processes remain in place, and to consider whether a software tool should be used to complement them. Systems such as DocuSign are widely used.

There also remain some situations where legal advice is recommended before relying on an electronic signature:

  • Where the other party is abroad – as local laws that are different from English law might apply
  • If executing a deed – the law requires certain types of document to be executed as a deed (for example, transfers of land and powers of attorney), and the issues around electronic signature and witnessing are more complicated here
Can employees who are self-isolating or on sick leave be placed on Flexible Furlough?

Employers had the ability to furlough extremely vulnerable employees who needed to shield.

If your employee is on sick leave or self-isolating as a result of Coronavirus, including as a result of track and trace, they’ll be able to get Statutory Sick Pay, subject to other eligibility conditions applying.

There is no special exemption for them, so they would need to meet the usual requirements to be placed on Flexible Furlough after 1 July 2020. i.e. They had to have been placed on furlough for at least 3 weeks before 1 July. Otherwise, they could not be furloughed.