Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

How should I approach negotiations with my landlord?

Given the impact the Coronavirus is going to have upon the commercial property market, landlords will undoubtedly, as a matter of good commercial sense, will have to seriously entertain approaches from tenants seeking a rent suspension – notwithstanding there is no entitlement to the same under their lease.

Some landlords may decide it is better to waive or suspend rental payments over the short term rather than face their tenants going out of business and leaving them with an empty building in a flat or dead market.

A measure falling short of a rent suspension would be for the tenants to negotiate with their landlord’s monthly payments of rent rather than quarterly and for those monthly payments to be in payments arrears, rather than in advance.

How can RPs carry out Person Centred FRAs/PEEPs on tenants within directly managed supported living units where the RP is not providing support and any floating support provider doesn't see it as part of their responsibility?

There is no simple answer.

The NFCC guidance states:

“The person-centred fire risk assessment is intended only as a simple means for non-specialists who have suitable understanding of relevant fire risks to determine whether additional fire precautions might be needed. The person who carries out the person-centred fire risk assessment will depend on the circumstances of the housing and support provision. It can be carried out by those who regularly engage with the resident, with input from specialists where necessary. Assessments will normally be undertaken with residents themselves.

In sheltered housing with scheme managers, the scheme managers normally engage with residents on a routine basis, enabling residents who need a person-centred fire risk assessment to be identified. Many vulnerable residents will be in receipt of care, so enabling the care provider to identify residents in need of a person-centred fire risk assessment. Providers of regulated care are required to take into account risks to people from their wider environment, to take steps to help people ensure that they are dealt with by appropriate agencies, or to raise safeguarding alerts when this is appropriate. Where a ‘stay put’ strategy is adopted, there will be a need to identify residents who need assistance from the fire and rescue service to evacuate the building.

In supported housing, the number of residents in each property is usually quite small. This, and the nature of the care service normally provided, enables person-centred fire risk assessments to be carried out asa matter of course, when a resident first moves into the property.

Where additional fire precautions cannot be provided in the short term, the risk should be reduced as far as reasonably practicable and an adult at risk referral should be made to Adult Social Care.”

Ideally then the RP will need to engage with any care providers in order to conduct the PCRA and identify risk mitigation measures. If they are reluctant to do so, the RP should engage with the individual in any event in undertaking the assessment.

Forcing annual leave

Employers have a statutory right to require employees to take annual leave at their direction, subject to providing staff with notice equal to at least double the length of the leave that you are directing them to take (e.g. 10 days’ notice for five days leave). However, this measure is not likely to achieve any urgent cost savings or alleviate immediate cash-flow pressure as holidays would need to be paid.

Clearly, annual leave can be taken on furlough so you could have staff on furlough and annual leave.

What should I be mindful of in relation to pregnant workers? Is there a right to suspend?

Yes, but as a last resort. In summary, the law requires employers:

  • to assess the workplace risks posed to new or expectant mothers or their babies;
  • to alter the employee’s working conditions or hours of work to avoid any significant risk to them;
  • where it is not reasonable to alter working conditions or hours, or would not avoid the risk, to offer suitable alternative work on terms that are not “substantially less favourable”;
  • where suitable alternative work is not available, or the employee reasonably refuses it, the employer should consider whether it is appropriate to suspend the employee on full pay.
What can I do to make sure my home-working people are doing so safely?
  1. Keep in touch. If contact is poor, workers can feel disconnected, isolated or abandoned. This can adversely affect stress levels and mental health – especially in the current crisis when everyone is feeling more anxious.
  2. Think about the use of laptops/devices (DSE) at home. Provide a basic form of risk assessment for self-completion.
  3. Remind workers of simple steps to reduce the risks from display screen work:
    • take regular breaks (at least 5 minutes every hour) or change activity
    • avoid awkward, static postures by regularly changing position
    • get up and move or do stretching exercises
    • avoid eye fatigue by changing focus or blinking from time to time