Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

I'm a doctor. What should I do if I think I may be infected with coronavirus?

The GMC recognises the challenges the doctors may face as the situation continues to develop. This includes concerns about the risks to the health of the doctors when treating patients with coronavirus. Doctors should follow the current public health advice including self-isolating if they know or suspect that they are infected or are at a higher risk of infection.

 

Finally, all necessary steps should be taken to ensure that doctors have access to protective equipment and minimise the risk of transmission when treating patients. It is imperative that a record is kept of all decisions made and how any safety or health concerns have been handled.

 

The GMC continues to work with NHS England and UK’s Chief Medical Officers to provide updates and advice to all doctors as the situation develops. Click here for more information.

Am I obliged to offer staff flexible furlough?

No, there is no obligation on employers to offer a flexible furlough arrangement to staff. Operationally, flexible furlough may not be appropriate for your business and equally, returning on a part-time basis may not be suitable for individuals already furloughed for various reasons. Concerns about returning to work part-time or at all should be considered on a case-by-case basis.

What is the penalty for failing to comply with the individual consultation obligations?

Failure to comply with the individual consultation obligations could render the dismissal unfair and expose you to a financial penalty of the lower of up to 1 years gross pay or the maximum statutory limit (currently £88,519).

I have essential workers who do home visits. How do I assess the risks?

The fundamentals of risk assessment remain the same as for any other foreseeable risk.

Focus on risk controls which reflect Government guidance; social distancing (2 metres) and avoiding contact with occupiers if possible, high-quality PPE – disposable overalls, gloves and fluid repellent surgical face masks, ready access to antibacterial wipes for surfaces, tools and equipment and plentiful hand sanitizer.

How the furlough scheme changed from 1 July – what is flexible furlough?

From 1 July 2020 the furlough scheme has been operating more flexibly.

The key changes from 1 July 2020 were:

  • All furloughed employees are subject to the new flexible furlough rules and the new basis for calculating claims
  • Furloughed employees can be brought back to work on a part-time basis for any amount of time and can work any work pattern
  • Employers can claim for the hours not worked compared the hours the person would normally have worked in that period
  • There must be a new written furlough agreement in place to record the agreement with the furloughed employee to return to work part-time
  • The new agreement (including a collective agreement) must be made before any period of flexible furlough begins but it may be varied at a later stage if necessary. The agreement must be incorporated into the employee’s contract of employment, either expressly or impliedly
  • Employers must keep a record of this agreement until at least 30 June 2025, and they must also keep a record of the hours the furlough employee worked and the hours that they were furloughed
  • Employees can be furloughed from 1 July 2020 for any amount of time and more than once
  • However, if you re-furloughed an employee after 10 June but before 1 July 2020, they had to be furloughed for an initial period of three consecutive weeks
  • Claims for payments under the scheme must not cross calendar months so if you are claiming for the initial three week period of a re-furloughed employee who was furloughed on 12 June for example, you must submit separate claims for the dates in June and July
  • Although flexible furlough agreements can last any length of time, you should only submit a claim to HMRC once a week.