What are the data protection implications of holding Covid-19 health data?
The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/
Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.
You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.
Related FAQs
As their employer, you have an overriding duty to provide a safe system of work. The Trust would not be able to run a defence to say that an employee “waived their rights” and chose to continue to work. Provided the decision around restricting duties has been carefully thought out, a full risk assessment undertaken and the employee has been truly consulted about the impact on them, then the decision taken will be a reasonable management instruction. Failing to follow that reasonable management instruction could amount to a disciplinary offence.
If a contract contains a force majeure clause this may become operative due to the coronavirus pandemic and related emergency legislation. Such clauses exist to ensure that if some unforeseen event prevents a party from being able to perform their obligations under a contract, either on time or at all, they will be excused from their obligations and not be held liable for non-performance.
The clause must actually be written into the contract to have effect – a force majeure clause cannot be implied into a contract. Whether it can be relied on by a party will depend on the wording of the clause itself as it may only be applicable in certain limited circumstances.
You should seek legal advice at an early stage if you think that force majeure is relevant, because a number of potentially complex issues must be addressed, many of which will turn upon the exact wording of the force majeure clause in the contract in question:
- Has a force majeure event actually arisen?
- What notification process do you have to follow to rely on the provision?
- What mitigation steps do you have to take?
- What is the effect of the force majeure event – is the contract suspended, or can it be terminated (which might not be what you want)?
Funding audits are being paused and no new audits will be commenced during the lockdown period.
To respond to the crisis businesses might need to exchange information to a greater extent than they would usually. They might need to discuss capacity and to coordinate supply chains (both upstream and downstream). They might need to purchase or sell jointly to ensure vital supplies are maintained. In general agreements or collaboration which:
- Avoid a shortage, or ensure security, of supply
- Ensure a fair distribution of scarce products
- Continue essential services
- Provide new services such as food delivery to vulnerable consumers
On 13 March 2020 the Secretary of State for Housing, Communities and Local Government issued a Written Statement in respect of delivery restrictions.
In this respect, many supermarkets, food retailers and distribution centres in England operate under planning restrictions (conditions and/or obligations) which limit the time and number of deliveries from lorries and other delivery vehicles which can take place particularly at night primarily to protect the residential amenity of nearby residential property.
Key points in the Statement include;
- Given the exceptional challenges facing the UK from the coronavirus, it is vital that deliveries of food, sanitary and other essential products over the coming weeks can be made as quickly and safely as possible, minimising disruption to the supply chains. The likely pressures on driver capacity mean additional flexibility is needed so that retailers can accept deliveries throughout the day and night where necessary.
- That planning enforcement is discretionary and that local planning authorities should act proportionately in responding to suspected breaches of planning control.
- That local planning authorities should not seek to undertake planning enforcement action which would result in unnecessarily restricting deliveries of food and other essential deliveries during this period having regard to their legal obligations.
The Statement acknowledges that the increased frequency of deliveries particularly at night could have a temporary impact on residents. It therefore concludes that the Government will review the need for the flexibility outlined in the Statement after the pressure from the coronavirus has reduced and that it is the intention to withdraw it once the immediate urgency has subsided.
A link to the Written Statement is below.