What are the data protection implications of holding Covid-19 health data?
The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/
Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.
You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.
Related FAQs
The change in the law has the potential to place much greater financial risks on suppliers, making it more difficult to exit a contract with a customer of doubtful solvency. This will place increased emphasis on appropriate financial due diligence and credit checking before entering into supply contracts.
In addition to the obvious issues around financial risk, suppliers will also need to think carefully about how their contracts are drafted. For example, any form of right that is drafted so as to be triggered on customer insolvency will clearly be problematic. These could include:
- Retention of Title provisions, which are commonly drafted so that the right to enter premises and retake possession of the goods is triggered on insolvency;
- Provisions for brand protection, which seek to control how goods are dealt with on termination of the contract.
This is potentially a very significant development for many businesses. We would strongly recommend specialist advice be obtained so that:
- businesses understand the potential increased risks faced; and
- where possible, contracts are updated so that appropriate protections are maintained.
These periods are often mistakenly referred to as minimum lengths of consultation (especially by Trade Unions). That is not correct. Consultation can commence, conclude and notices of dismissal be issued within the 30 and 45 day periods. The expiry of the notice would just have to be outside of those restricted periods.
Has there ever been a more important time for all staff to feel that they are able to raise concerns about their working environment?
It is a pertinent time to remind all staff that they should be able to raise concerns without the fear of repercussions. It is a good time to be reviewing and re-issuing your Freedom to Speak up/Whistleblowing policy to all. Likewise it is a good time to remind all staff that they should not treat others unfairly or detrimentally for raising health and safety concerns.
Both subjecting someone to a detriment because they have blown the whistle or raised health and safety concerns (and dismissing someone for the same) is unlawful.
You will claim a pro rata’d amount of 80% of salary, based on the proportion of hours not worked out of the employee’s normal working hours (their “usual” hours).
There are 2 ways to calculate an employee’s usual hours, depending on whether they have fixed or variable hours/pay:
- For those with fixed hours/pay, you take the number of hours worked in the pay period before 19 March 2020.
- For those with variable hours/pay, you take the higher of:
- the average number of hours worked in the tax year 2019 to 2020 or
- the corresponding calendar period in the tax year 2019 to 2020.
If employees are paid per task or piece of work done, you should work out the usual hours for these employees in the same way as for other employees who work variable hours, if possible.
When you calculate the usual hours, you should include any hours of leave for which they were paid their full contracted rate (such as annual leave) and any hours worked as overtime (but only if the pay for those hours was not discretionary).
In the unfortunate event that there will be a significant number of deaths, planning will fall to the local resilience forum; which includes all relevant local organisations and statutory bodies, who will have prior experience in working in excessive death scenarios.
It is for the coroners to ensure that they are familiar with the local resilience forum plans and discussions required. This will include issues regarding storage capacity and post-mortem examination capacity.