Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

Do I need to give a personal guarantee to access finance under the Coronavirus Business Interruption Loan Scheme (CBILS)?

A number of our clients and networks raised issues in the early stages of the Scheme around the requirement for personal guarantees to access finance under the Scheme. The Scheme has now been updated so that:

  • For facilities under £250,000, personal guarantees cannot be taken to support lending under the Scheme.
  • For facilities above £250,000, personal guarantees may still be required by a lender but the amount which can be recovered under these guarantees is capped at a maximum of 20% of the outstanding balance of the CBILS facility after taking into account any other recoveries from business assets.
If a member of staff does not inform me that they ought to be self-isolating will I still be liable for a fine?

Potentially no.

If an employer is not put on notice that the circumstances of a worker or agency worker are such that they ought to be self-isolating, by either the worker or agency worker themselves or another member of staff, then there ought to be a reasonable excuse, and potentially, no fixed penalty notice will be issued.

Will there be further measures for self-employed announced?

The Government assured parity for the self-employed but it has since accepted that this would be difficult to achieve. The Association of Independent Professionals and the Self-Employed (IPSE) has worked closely with the Government on implementing the current self-employment income support scheme. IPSE has confirmed that it will continue to work on helping to extend measures to all freelancers in need as a result of Covid-19.

The Government announced an extension to the Self-Employment Income Support Scheme from 1 November 2020.

 

What is the penalty for failing to comply with the individual consultation obligations?

Failure to comply with the individual consultation obligations could render the dismissal unfair and expose you to a financial penalty of the lower of up to 1 years gross pay or the maximum statutory limit (currently £88,519).

Is it legally enforceable?

The guidance is non-statutory and is not binding on business. However, businesses should be aware that there might be reputational consequences if they do not follow the guidance; we have already seen in the context of taking advantage of furlough funding that not being in breach of the law is no protection against negative publicity. Further to the extent a contract expressly requires parties to act reasonably, it could be expected that this guidance is one of the factors a court would consider in determining what is reasonable.