Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

Can I wait until April to carry out assessments?

We don’t recommend this. Status determination statements must be issued before 6 April 2021 for current engagements and the appropriate deductions are to be made on payments for services carried out on or after 6 April 2021.

What is the government's "Kickstart Scheme"?

This scheme is specifically aimed at creating jobs for 18-24 year olds who are on Universal Credit and considered most at risk of unemployment because of the economic downturn. The Government has announced that it will pay young people’s wages (equivalent to 100% the National Minimum Wage plus the associated National Insurance contributions and employer minimum automatic enrolment contributions) for up to 6 months, and that this will amount to a grant worth approximately £6,500 per young person.

The jobs that are created must provide a minimum of 25 hours per week and be paid at a minimum of the National Minimum Wage The Chancellor announced that will be no cap on the number of jobs that will be funded under the Kickstart scheme.

What do I do if my visa is due to expire but I can't travel?

If your visa has expired or will do before you are able to safely leave the UK, you can apply for “Exceptional Indemnity” by contacting the Coronavirus Immigration Team. You will need to provide evidence as to why you cannot leave, which could include a positive Covid-19 test or evidence of being unable to make travel arrangements to leave the UK in time.

You should note that “Exceptional Indemnity” does not extend your leave, but temporarily protects you from adverse action being made against you as result of overstaying your visa.

Can I dismiss an employee who refuses to return to work?

Potentially. The first question is why the person is not able to return, as their individual circumstances will be very relevant in terms of whether they can be safely dismissed.

Employers should ask themselves 2 questions in this situation:

  1. Have I done everything I am required to do in order to make the workplace safe for the individual to return; and
  2. Is what the employee saying reasonable?

If the answer to question 1. is no then a dismissal is unlikely to be fair. However, even if the answer to question 1. is yes, then there is still question 2. to address. If the employee has reasonable grounds as to why they are unable to return to work, e.g. due to health issues, childcare responsibilities etc then the dismissal is unlikely to be fair. It is only if you can answer yes to question 1. and no to question 2. that you can have some confidence in the potential safety of the dismissal.

Dismissals based on objections to returning to work on health and safety grounds will very often be risky and are highly fact specific, therefore please contact one of the employment team for further advice prior to dismissal.

Can an employee still do volunteer work when on Flexible Furlough?

An employee on Flexible Furlough can take part in volunteer work during hours which you record your employee as being on Flexible Furlough as long as it is for another employer or organisation.

To be clear, if on Flexible Furlough and you’re claiming the grant for them, then they cannot work for you.

As people work part-time and ease back into the business, this is likely going to be a key risk area. You need very clear lines as to working time and non-working time. No replying to emails on days off.