Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

Are permitted development rights now in existence for the creation of emergency medical facilities?

Yes. The Town and Country Planning (General Permitted Development) (Coronavirus) (England) (Amendment) Order 2020 came into force on 9 April 2020 giving permitted development rights for emergency development. The permitted development right is available to local authorities and health service bodies (as defined) on land owned, leased, occupied or maintained by it for the purposes of:

  • Preventing an emergency
  • Reducing, controlling or mitigating the effects of an emergency
  • Taking other action in connection with an emergency

It could cover, for example, the temporary change of use of buildings into a Nightingale Hospital or the establishment of a testing centre.

The permitted development right is not permitted in certain instances and is subject to a number of conditions including the notification of the local planning authority and the cessation of the use before 31 December 2020.

Further detail of the permitted development right is available at the link below.

http://www.legislation.gov.uk/uksi/2020/412/made

OPPORTUNITY: Funding towards legal advice for North East SMEs

We have teamed up with Scaleup North East to help companies impacted by the coronavirus outbreak plan how to get back to business.

Our specialist lawyers will provide a free “diagnostic” call with eligible businesses across the NE, exploring challenges they are facing in the aftermath of the lockdown, and identify specific steps to survive, and then thrive, in these challenging times and beyond.

Through the collaboration with Scaleup North East, eligible North East-based SMEs are then able to apply for up to 40% funding towards up to £4,000 of legal advice.

These might include:

  • Employment issues, such as dealing with a phased return to work
  • Measures to support cash-flow, such as amendment to terms of trading and debt collection procedures
  • Renegotiations and amendments to contracts, and other advice about contracts with suppliers and customers to deal with consequences of Covid-19
  • Managing property costs – review of leases, advice on break clauses and formalisation of any revised arrangements recently put in place with landlords/tenants
  • Health and safety implications of return to work and social distancing

Find out more on our website or contact partner Damien Charlton.  If you are not eligible because of location but are interested in the free “diagnostic”, please contact us.

What is the over-riding statutory duty for employers to ensure the health and safety of employees?

It is worth pointing out that, despite all the guidance, survey results and other advice about managing Covid-19 H&S risk in the workplace, the law has not been changed. None of the guidance is codified by regulation/legislation, which means that you are managing this risk in the context of existing H&S law.

In very simple terms, HASWA74 requires employers to take “all reasonably practicable steps” to ensure the health and safety of its employees (and anyone else affected by your business).

“Reasonably practicable” means to balance risk reduction against the time, money and effort required. If measures are grossly disproportionate, you wouldn’t be expected to take them, but there is a strong presumption in favour of taking any steps which will protect workers.

As part of managing the health and safety of your people, you must control the risks in your workplaces. To do this, look for what might cause harm to people while they work and decide whether you are taking reasonable steps to prevent that harm. This related duty under MHSWR is to ensure you undertake a “suitable and sufficient assessment of risks.”

What if we are a charity in Scotland Wales or Northern Ireland?

Because they all have devolved governments, when there are changes to spending levels in England, the Government makes adjustments to the amount of public expenditure allotted to Scotland, Wales and Northern Ireland.  In this case £60 million will be made available for all of the devolved administrations as a result of the £370 million funding allocated to charities in England. This is broken down as follows:

  • £30 million for the Scottish Government
  • £20 million for Welsh Government
  • £10 million for the Northern Ireland Executive

There may be further allocations, dependent on the final projects funded, through the £360 million direct grant pot.