Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

Can you require an employee to tell their employer whether they have been tested for coronavirus/the results of that test?

Yes, this is very likely to amount to a reasonable management instruction which is put in place for public health reasons. Employers should make it clear to their employees that this is something they are required to do and that if they fail to do so this may lead to disciplinary action.

What will happen to patent, trade mark and design registration applications that are currently being processed or which I want to file?

In recognition of the problems that the current situation is causing, the UK IPO classed the 24th March and all subsequent days as “interrupted days” which means that deadlines that fall within this period will be extended until the UK IPO declares that the interrupted days have ceased. As lockdown has begun to be eased, the IPO has now reviewed its position and has confirmed that the “interrupted days” period will come to an end on the 29 July 2020. This means that Thursday 30 July 2020 will be the first normal day of operation, therefore all “interrupted days” deadlines will expire on this day. Similarly, if your deadline falls after the period of interruption ends, this deadline will not be automatically extended.

The IPO is conscious that many businesses may still be in challenging positions when the period of “interrupted days” end. They will endeavour to continue to provide flexibility and support to assist businesses with their applications. They hope to temporarily remove fees for requests for extensions of deadlines, and will give further updates when this fee exemption is in place.

The IPO continues to encourage applicants to meet original deadlines where they are able.  As their offices are closed, the UK IPO is not currently processing paper forms (i.e. hard copy) and faxes. However, they are processing forms which have been submitted electronically, or via email and have made a new email address available for the submission of forms.

Intellectual Property Offices covering other territories have made their own announcements about the extension of deadlines. The EUIPO’s period of extension of deadlines came to an end on the 18th May. However, they have published a Guidance Note and accompanying webinar on the EUIPO website, detailing options for parties who may struggle to meet deadlines and remedies for those who may have missed deadlines.

Can an employee still do volunteer work when on Flexible Furlough?

An employee on Flexible Furlough can take part in volunteer work during hours which you record your employee as being on Flexible Furlough as long as it is for another employer or organisation.

To be clear, if on Flexible Furlough and you’re claiming the grant for them, then they cannot work for you.

As people work part-time and ease back into the business, this is likely going to be a key risk area. You need very clear lines as to working time and non-working time. No replying to emails on days off.

What is a small company?

The changes will not apply to end users who are a small company. If you meet two out the following 3 conditions, you will meet the small company definition and are therefore exempt from the changes to IR35:

  1. Annual turnover is no more than £10.2 million
  2. Balance sheet total is no more than £5.1 million
  3. No more than 50 employees

Companies will always be classified as small in their first financial year. Public companies will always be considered to be medium or large businesses and cannot fall under this exemption.

For a group company to be a small company its parent company must also meet the small company definition.

What should I do if contractor insolvency occurs?

In the event that the worst happens and contractor insolvency occurs, there are a number of steps which the employer should take immediately:

  • Confirm that insolvency has actually occurred and the type of insolvency (for example liquidation or adjudication) – actions taken based on rumours can have adverse consequences
  • Secure the site and carry out an audit of the plant, equipment and materials present – this may extend to changing the locks on site in order to prevent overzealous contractors and sub-contractors seeking to return and take what they see as their possessions. The building contract may contain a provision that these are the employer’s property, but they can be difficult to recover if they are not within the employer’s possession – possession is 9/10ths of the law!
  • Ensure that there are adequate insurance and health and safety arrangements in place for the site – these would usually be dealt with by the contractor and therefore may no longer be in place, so alternative arrangements may be required
  • Ensure that any further payments to the contractor are stopped pending a more detailed review
  • Consider whether any off-site materials have already been paid for and can be secured. This can however be difficult in practice where the materials are not physically within the employer’s possession

In addition, there are also a number of further actions which the employer should consider in the slightly longer term:

  • Investigate the options available and ascertain the cost of completing the works to assist in deciding how best to proceed
  • Consider whether termination of the contractor’s employment under the building contract is required, and if so take the necessary steps in accordance with the building contract
  • Consider whether there are any bonds or guarantees in place upon which the employer can rely, and if so assess their terms as to whether and how to make a claim
  • Make arrangements to complete the works – as a general rule of thumb the cost of completing the works may increase by around 30% if it is necessary to get a replacement contractor
  • Consider whether direct payment to subcontractors is possible or desirable
  • Although we would say this(!) we would strongly recommend taking legal advice, as insolvency and its implications are complex and it is easy to inadvertently fall foul of the various different requirements