Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

What agreements will the CMA choose not to take enforcement action in respect of?

CMA guidance suggests that it will not take enforcement action in respect of agreements which:

  • Are appropriate and necessary to avoid a shortage, or ensure security, of supply
  • Are clearly in the public interest
  • Contribute to the benefit or wellbeing of consumers
  • Deal with critical issues that arise as a result of the Covid-19 pandemic
  • Last no longer than is necessary to deal with these critical issues
What if we are a charity in Scotland Wales or Northern Ireland?

Because they all have devolved governments, when there are changes to spending levels in England, the Government makes adjustments to the amount of public expenditure allotted to Scotland, Wales and Northern Ireland.  In this case £60 million will be made available for all of the devolved administrations as a result of the £370 million funding allocated to charities in England. This is broken down as follows:

  • £30 million for the Scottish Government
  • £20 million for Welsh Government
  • £10 million for the Northern Ireland Executive

There may be further allocations, dependent on the final projects funded, through the £360 million direct grant pot.

Does an employee who is furloughed lose his/her benefits under an EMI share option?

One of the key legislative requirements of EMI is that the employee satisfies the working time requirement, which is that they work at least 25 hours per week in the company or, if less, 75% of the employee’s total working time. If the working time requirement ceases to be met, then there is a “disqualifying event”. That means that the tax benefits of EMI ceases. It may also mean that the option lapses, but that depends on the specific terms of the option.

An employee who has been furloughed is by definition no longer working 25 hours/week and therefore on the face of it, there is a disqualifying event. However, the Government has tabled an amendment to the Finance Bill currently going through Parliament providing in effect that time not worked because an employee has been furloughed counts as working time, both for determining whether the working time requirement is met initially and whether there is a disqualifying event. Provided this amendment is enacted, this should address the issue.

Reductions in working hours

Another obvious cost cutting measure is to reduce working hours, either temporarily or permanently. Again, it should be done fairly, either across the board or by selecting teams/individuals based on objective business reasons. Imposing without agreement would create significant risk, therefore would require fair selection and consultation.

How important is social distancing when planning your workplace?

It is absolutely critical to creating a safe workplace and to making workers feel secure.

This could include floor markings every 2m (as we’ve seen in grocery stores), stopping or limiting/staggering access to communal or common areas such as toilets and kitchens, rearranging workstations to maintain a 2 metre distance or, where this is not possible (for example in manufacturing facilities or production lines), erecting physical barriers and avoiding face to face working, encouraging the use of stairs and discouraging lift-use, designing a one-way system for entry and exit and looking at aircon/heating systems to see if any modifications are possible to prevent the spread of airborne particles. If you can increase ventilation in your workplace, it will help reduce risk.

The government has published detailed social distancing guidance for workplaces across sectors including manufacturing, retail, offices, construction and transport; it has also promised to continue to add to this.