Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

What is the difference between individual and collective consultation?

Where it is envisaged that 20 or more employees will be dismissed at a relevant establishment within a 90 day period or less, then collective consultation is required (in addition to individual consultation) and the company must inform BEIS (using form HR1).

If there are less than 20 dismissals then you are only required to carry out individual consultation.

Retraining and redeploying

If the business has areas requiring an increased workforce whilst others require a reduced workforce, staff can be retrained and redeployed across the organisation or even across a wider group of companies. This will not reduce the wage bill but will avoid the need for redundancies. Making fundamental changes to an employee’s role and duties will require their agreement following a fair selection and consultation process.

Should we issue petitions?

Our advice to you here is simple. It will depend on the circumstances surrounding your debt but for the most part, unless it is crystal clear that there has been a debt outstanding long before Covid-19 and there was an inability to pay prior to the Covid situation we would recommend that you hold off issuing any further petitions until after the 31st December. Unless the criteria set out above is met, a judge is likely to exercise their discretion leniently and could dismiss the petition. This could also lead to cost consequences which would adversely affect you.

We are happy to discuss individual cases to assist creditors at this difficult time, however, generally any cases proceeding to petition would be the exception as opposed to the rule. Even if presenting a winding up petition is not available for now, there may still be other forms of legal proceedings that you can use to collect money owed to you, like county court proceedings.

I don’t live in the same home as my child’s other parent. Can my child move between each house?

If you are separated from your child’s other parent, government guidance about self-isolation and social distancing may have an impact on the contact arrangements that are in place and give rise to disagreements about spending time with the other parent, travelling arrangements and whether the child should continue to go to school, where one of the parents is a key worker and a school place is available.

The government has issued guidance which makes it clear that where parents do not live in the same household, children under the age of 18 can be moved between their parents’ homes.

Cafcass has also issued guidance which states that, “unless there are justified medical/self-isolation issues – or some future nationally issued guidance or expectation associated with leaving the house in your area – children should maintain their usual routine of spending time with each of their parents. If there is a Child Arrangements Order in place this should be complied with unless to do so would put your child, or others, at risk”.  The guidance from Cafcass be accessed here.  https://mcusercontent.com/2750134472ba930f1bc0fddcd/files/987e77d6-0827-470c-9447-acc61404f465/CAFCASS_Covid19_advice_for_familes_20.pdf

Can we require employees to have their temperatures taken on the way in to work, and is this something we should be doing?

If such testing is regarded as a “reasonably practicable step” which has been identified as an appropriate control following a risk assessment then it is something you can do.

Although you can’t physically force someone to have something intrusive done, this is very likely to be a reasonable management instruction and therefore if someone refuses to have this done as a condition of entry into the work place then disciplinary action may follow.

Where this is something that is required of employees, employers should be letting their staff know that this is one of a number of measures that are being introduced into the workplace for their own safety. If the employer can explain, in advance of the return, why temperature checks need to be taken, what the consequences of the results will be- i.e. will they be sent home if over a certain temperature, whether this data will be stored (and if the sole purpose is to determine whether or not they are fit to attend work on a particular day then why are they being stored), and the fact that temperature checks are a requirement of entry to company premises for everyone, then there shouldn’t be significant resistance to this measure.

Large scale temperature checks have in some businesses become part of the “new normal” working environment.