Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

What should an employer do when an employee has been told to self-isolate under the coronavirus Test and Trace scheme?
  • Do not require them to work
  • Continue to communicate with and support them
  • Allow them to work from home, is there alternative work for them to do if they can’t do their work from home
  • Offer SSP or allow them to take holiday if they want to.
Can employees take annual leave during a period of furlough?

Yes, however holiday pay during furlough must remain at the normal rate of pay and not the reduced furloughed rate. You can still claim for this period under the scheme but you will be responsible for any amounts beyond the maximum you can claim. Employers have flexibility to restrict when leave can be taken both during and after period of furlough in the normal way.

If an employee usually works bank holidays then the employer can agree that this is included in the grant payment. If the employee usually takes the bank holiday as leave then you would either have to top up their usual holiday pay, or give the employee a day of holiday in lieu.

I lease commercial premises. Can my landlord forfeit my lease?

As part of the Coronavirus Bill there is some good news for tenants in so far as it included the following:

  • All commercial tenants in England, Wales and Northern Ireland missing rent payments are to benefit from a government ban on forfeiture of their lease.
  • Landlords then will be prevented from terminating leases and “evicting” commercial tenants.
  • The above provisions rules will apply not only to principal rent, but to “any sum a tenant is required to pay”, leaving the burden of supplying services and insuring the premises on landlords. The bill will last until 30 June 2020, with an option for the government to extend this deadline.

Whist this is helpful to any Tenant planning not to pay rent or other payments due under their lease insofar as they will not suffer forfeiture and be evicted, it should be noted that the contractual obligation to continue paying rent and all other costs due under the lease remains and Landlords will still be able to take action to recover any payments due under the lease that are in arrears.

Coronavirus Statutory Sick Pay Rebate Scheme

The Coronavirus Statutory Sick Pay Rebate Scheme will repay employers the SSP paid to current or former employees and will be available from 26 May 2020. See here.

The scheme covers all types of employment contracts and employers will be eligible to claim if they:

  • Are claiming for an employee who is eligible for sick pay due to coronavirus
  • Had a payroll scheme that was created and started on or before 28 February 2020
  • Had fewer than 250 employees on 28 February 2020

The repayment will cover up to 2 weeks starting from the first qualifying day of sickness, if an employee is unable to work because they either:

  • have coronavirus (COVID-19) symptoms
  • cannot work because they are self-isolating because someone they live with has symptoms
  • are shielding and have a letter from the NHS or a GP telling them to stay at home for at least 12 weeks
  • have been notified by the NHS or public health bodies that they’ve come into contact with someone with coronavirus
  • they have been notified by the NHS to self-isolate before surgery

You can claim for periods of sickness starting on or after:

  • 13 March 2020 – if your employee had coronavirus or the symptoms or is self-isolating because someone they live with has symptoms; or
  • 16 April 2020 – if your employee was shielding because of coronavirus.
  • 28 May 2020 – if your employee has been notified by the NHS or public health bodies that they’ve come into contact with someone with coronavirus
  • 26 August 2020 – if your employee has been notified by the NHS to self-isolate before surgery

Employees do not have to give you a doctor’s fit note for you to make a claim. But you can ask them to give you either:

  • an isolation note from NHS 111 – if they are self-isolating and cannot work because of coronavirus
  • the NHS or GP letter telling them to stay at home for at least 12 weeks because they’re at high risk of severe illness from coronavirus
  • the evidence from the NHS or public health body requiring them to self-isolate

You must keep the following records in relation to a claim you make under the scheme for three years:

  • The reason for the employee’s absence
  • Details of each period the employee could not work, including start and end dates
  • Details of the SSP qualifying days when the employee could not work
  • National insurance numbers for each employee you have paid SSP to

You’ll need to print or save your state aid declaration (from your claim summary) and keep this until 31 December 2024.

What should payroll look out for if the Government's Coronavirus Job Retention Scheme is used?
  • It is important to have a clear paper trail for any agreed reduction in salary, and hence any reduction in the amount of contributions. However, the contribution rates (as opposed to the amounts) should be the same as normal, and hence all processes and software should function as per normal and, amongst other things, remain compliant with auto-enrolment employer duties.
  • However, if the period of affected contributions does not overlap precisely with the period of reduced salary, for example because of different cut-off dates, there may well be instances of non-compliance with auto-enrolment employer duties at the beginning as well as at the end of the period covered by the Coronavirus Job Retention Scheme.
  • Accordingly, where an employer takes advantage of the Coronavirus Job Retention Scheme, good communication with the persons responsible for pensions administration and detailed record-keeping are essential to prevent non-compliances in the short-term and confusion in the long term.