Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

What is the penalty for failing to comply with the collective consultation obligations?

Failure to comply with the collective inform and consult obligations could impact on the fairness of any dismissals – see next question. In addition, a Tribunal can award a protective award of up to 90 days gross pay for each affected employee. The purpose is intended punish the employer for not complying with the obligations, not to compensate the employee for their individual financial loss.

What funding is the Government providing specifically for charities?

The Government has announced a £750 million funding package for charities to ensure they can continue their vital work during the coronavirus outbreak.  This is for a 3 month period and further specific funding may be made available.

Charities which are businesses can also access the Government’s Coronavirus Business Interruption Loan Scheme (CBILS) – Please see our Funding and Finance FAQ’s.

What is the reaction to the funding?

The reaction from NCVO is that this is an important first step.  However, it will not stop well run charities from closing and others will look very different in a few months’ time.

I’m a social housing provider. What do I do if I know my tenants are flouting the social distancing guidelines?

If a tenant continues to refuse to take heed of the government’s social-distancing guidelines, for example by inviting large groups of people who do not reside there to their property, it can constitute a nuisance. One housing association successfully applied for an injunction. The injunction ordered by the Court stipulated that no persons, other than the children of the tenant, are to attend the property until the current social-distancing restrictions are lifted by the government.

A representative of the housing association highlighted the need for the current guidelines to be followed and the need for housing providers to ensure that all residents living in their communities are kept safe during this time of ‘unprecedented risk’.

This case demonstrates that flouting of the current restrictions is likely to be considered anti-social in the eyes of the courts – a point which all housing providers should bear in mind during this period. Further, it highlights the availability of an alternative remedy to the issuing of possession proceedings (in light of the government’s moratorium on evictions) to deal with anti-social behaviour during the next three months, Covid-19 related or not.

When does IR35 generally apply?

It would apply if the contractor uses an intermediary to provide their services or labour and they would be deemed to be an employee or office holder for tax purposes if they were hired directly by the end user client rather than via the intermediary PSC. This would of course require an assessment of employment status for tax purposes.

Contractors who are not taxed in the UK and supply their services exclusively from outside of the UK are unaffected.

If IR35 applies, tax and NIC’s should be deducted under PAYE by the PSC. In reality this has not been happening so a major reform of the regime was due to be implemented in April 2020. The changes were postponed by one year and are due to take effect from 6 April 2021.

“Within IR35” means a contractor arrangement is caught by IR35 and the individual should be taxed as an employee.

“Outside IR35” means a contractor arrangement is not caught by IR35 and the contractor status is fine.