Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

Is it legally enforceable?

The guidance is non-statutory and is not binding on business. However, businesses should be aware that there might be reputational consequences if they do not follow the guidance; we have already seen in the context of taking advantage of furlough funding that not being in breach of the law is no protection against negative publicity. Further to the extent a contract expressly requires parties to act reasonably, it could be expected that this guidance is one of the factors a court would consider in determining what is reasonable.

Would it be appropriate to suspend someone who refuses to restrict their duties?

Suspension should always be a last resort and not a knee jerk reaction. We would not advise suspension unless a the above steps around the risk assessment have been undertaken. Depending on your local policies, suspension could then be an option on the basis that their health and safety and the health and safety of others are put at risk by their actions.

Reductions in salary

An obvious cost cutting measure is to reduce salaries, either temporarily or permanently. If you are to seek a reduction in salaries, this should be done fairly – either across the board or by selecting teams/individuals based on objective business reasons.

Note that this cannot be imposed without significant risk. Without agreement, this would need fair selection and consultation.

What is the Government’s Coronavirus Job Retention Scheme?

All employers in the UK are eligible to participate in the scheme. The purpose of the scheme is to allow employers to claim back employment costs if they have furloughed employees arising from the coronavirus crisis. Importantly this means the scheme is not limited to cases where the employee would otherwise have been made redundant.

Key points:

  • Between 1 November 2020 – 30 June 2021, the government will reimburse employers for 80% of wage costs, up to a cap of £2,500 per month, with employers expected to contribute 10% of that 80% in July 2021 and 20% of that 80% in August and September 2021. Employers will still need to pay employer NICs and employer pension contributions (these cannot be claimed for).
  • The scheme now also allows employees to return to work part time being on furlough for the remainder. See flexible furlough above for more information.
  • The employer can agree to pay the employee more than it will be reimbursed but it cannot reclaim the additional amount or any other costs associated with the additional amount.
  • The workers covered by the scheme are those who have been “furloughed” which is a leave of absence.
  • Workers must be told about and agree to this change of status (see below).
  • Employers have to continue to pay the furloughed workers and the Government will reimburse the employer.
  • HMRC is administering the scheme and it has been extended until the end of September 2021
  • Those who left employment and are re-employed and subsequently furloughed by agreement are eligible (please see the FAQ regarding redundancy and furlough above).
  • Payments may be withheld if claims are based on inaccurate or dishonest information, or are found to be fraudulent. HMRC has put in place an online hotline for employees and the general public to report suspected fraudulent claims.
  • The Government has made alternative help available for employers to continue to pay employees while the scheme is set up.
How can workers get to work safely?

The Government’s guidance says walk, cycle or drive to work and avoid public transport if you can. Businesses will need to support workers in adopting alternative travel methods to reduce exposure to the virus. You could consider staggering start and finish times for shifts to reduce commuting during peak hours, or support cycling with secure storage facilities and a drying room.