Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

Other considerations – the mental health and wellbeing of BAME staff and others

Undeniably and understandably BAME staff, as well as those staff who are identified as being at a higher risk, are going to have high levels of stress and anxiety. For some, this may become of such severity that those staff should be considered to be disabled under the Equality Act 2010. The question as to whether someone is disabled is one that should be answered in conjunction with appropriate medical advice. But the question about how to support any staff suffering with stress and anxiety should not be left until that stage. Proactive steps need to be taken and expert advice obtained on what support measures should be put in place. We know that many NHS organisations are already giving the mental wellbeing of their staff the highest priority.

From our perspective, we would ask managers to be mindful that stress and anxiety is likely to feature in how an individual reacts to questions about the level of risk to their health and the impact on their duties. The conversations with some staff may not be easy to have and may be met with challenge.

For those staff who’s stress and anxiety is such that it would qualify as a disability, reasonable  adjustments will need to be considered to the processes that you are applying.

An additional point to consider – it might be worth writing to all staff, asking them to come forward if they have any health conditions that they think you ought to be aware of, assuring them that such information is being given in the strictest confidence. You want to make sure that you are taking the appropriate measures to ensure their health and safety.

How do I access the Coronavirus Job Retention Scheme?

The scheme is being administered by HMRC under a new online portal that has been set up. It applies to businesses, charities, recruitment agencies, individuals who employ a nanny, administrators (where there is a reasonable likelihood of re-hiring the workers) and public authorities.

All employers with a UK payroll can apply as long as you have:

  • Created and started a PAYE payroll scheme on or before 28 February 2020
  • Enrolled for PAYE online (which can take up to 10 days)
  • A UK bank account.

To make a claim you will need:

  • The number of employees being furloughed
  • The start and end date of the claim
  • The name and National Insurance Numbers for each furloughed employee
  • Your employer PAYE reference number
  • To be registered for PAYE online
  • The Self-Assessment Unique Taxpayer Reference, Corporation Tax Unique Taxpayer Reference or Company Registration Number as appropriate for your entity
  • Your UK bank account details and sort code
  • Your name and contact number
  • Your organisation’s registered name
  • Your organisation’s billing address
  • The full amounts you are claiming for including:
    • Employee wages
    • Employer national insurance contributions
    • Employer minimum pension contributions

For claims for those who are flexibly furloughed you will also need:

  • the number of usual hours the employee would work during the claim period
  • the hours the employee has worked or will work during this period
  • you will also need to keep a record of the number of furloughed hours that the employee has or will be furloughed for.

You will need the above information ready before you access the system to make a claim. You will also need to have calculated the amounts claimed in advance as the application needs to be completed in one session. You can currently save one draft of the application and it must be completed within 7 days of starting it.

The Government has issued a step-by-step guide for employers who wish to make a claim under the scheme which can be found using the link below. It contains useful information about calculating the payments claimed. You will need to register for a Government Gateway ID and password if you do not yet have one in order to access the portal.

https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/880099/Coronavirus_Job_Retention_Scheme_step_by_step_guide_for_employers.pdf

If you use an agent who is authorised to act for you for PAYE purposes, they will be able to make a claim on your behalf. If you use a file only agent (who files your RTI return but doesn’t act for you on any other matters) they won’t be authorised to make a claim for you and you will need to make the claim yourself. A file only agent can assist you in obtaining the information required to make a claim (listed above). If an agent makes a claim on your behalf you will need to tell them which bank account you would like the grant to be paid into.

For claims for fewer than 100 employees you will need to input the details separately for each employee. If claiming for more than 100 employees you can upload a file with the information instead. The file should include the following information for each furloughed employee: name, National Insurance number, claim period and claim amount, payroll/employee number (optional). You will also need to include details of hours normally worked, actual hours worked and hours furloughed for those who are flexibly furloughed.

The need to demonstrate the impact of coronavirus on your business is not one of the criteria listed above about who can make a claim, so the government does not appear to intend to set a specific test to determine if a business is “severely impacted by coronavirus”. You are not required to explain the impact of Coronavirus on your business when submitting your claim.

HMRC will retain the right to audit any claim retrospectively. You must keep records for 6 years including:

  • the amount claimed and claim period for each employee
  • the claim reference number
  • you calculations for each claim
  • details of hours usually worked and hours actually worked for flexibly furloughed employees.

You must tell your employees that you have made a claim under the scheme, and you must continue to pay their wages during this time.

What are the alternatives to an injunction?

A quicker and more cost-effective option may be the involvement of the police given their recent allocation of emergency powers to disperse, fine or even arrest persons who flout these rules. Nevertheless, it appears that the Court is willing to support housing providers in their efforts to tackle anti-social behaviour during this time.

My business has a contract with a public sector body – what guidance has the Government issued about payment under contracts between public and private sector bodies?

The Cabinet Office has published a helpful Procurement Policy Note (“PPN”) on relief available to suppliers due to Covid-19 (available here). This can include making advance payments to suppliers, if necessary. The PPN sets out actions that public sector bodies should take (until at least 30 June 2020) to ensure continuity of service and to ensure that its suppliers can resume normal contract activity once able to.

The actions public sector bodies should be taking include:

  • Informing its suppliers (that they believe are at risk) that they will continue to be paid as normal until the end of June 2020 (even if service delivery is currently interrupted). Risk might include supply chains collapsing and/or significant financial implications for a supplier
  • If a contract involves a payment by results mechanism, basing payments on previous months (e.g. the average monthly payment over the previous 3 months), and
  • Ensuring that invoices submitted by suppliers are paid immediately to maintain cash flow in the supply chain and help to protect jobs.

If you are a supplier to a public sector body, you must act transparently and on an open-book basis, making cost data available to your public sector clients. You must also continue to pay your employees and subcontractors / suppliers. Suppliers to the public sector must not expect to make profits on any undelivered elements of a contract. The PPN makes clear that, should suppliers be found to be taking undue advantage, or failing to act transparently, a public sector body can take action to recover payments made to that supplier.

The PPN requires public sector bodies to urgently review their contract portfolios and take steps to support suppliers who they believe are “at risk”. However, no definition of “at risk” is given in the document.  We would suggest that if you are a supplier and you have yet to hear from a public sector client, you should seek to get in touch with them as soon as possible, particularly if you have concerns about your supply chain, staff retention and/or are experiencing financial difficulties currently. Given the requirement for transparency, you may be required to provide evidence, so it may be helpful to have any relevant documentation ready to send, if necessary, as this may help ensure a decision is made by the public sector client more promptly, particularly as the public sector body may have a number of contracts to consider.

 

What is the current guidance for court of protection hearings?

The current guidance issued by Mr Justice Hayden confirms that remote hearings may be conducted using the following facilities and that this will be the default position until further direction:

  • By way of an email exchange between the court and the parties;
  • By way of telephone using conference calling facilities;
  • By way of the court’s video-link system, if available;
  • The use of the Skype for Business App installed on judicial laptops;
  • Any other appropriate means of remote communication, for example BT MeetMe, Zoom or FaceTime.