What are the data protection implications of holding Covid-19 health data?
The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/
Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.
You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.
Related FAQs
Yes.
An employer which is aware that a worker or agency worker is or ought to be self-isolating, should not knowingly allow that worker or agency worker to leave the place that they are self-isolating in (“the designated place”). To do so without reasonable excuse would amount to an offence which could result in the employer being issued with a fixed penalty notice.
The value of the fixed penalty varies depending on if it is the first or subsequent fixed penalty notice to be issued:
| First fixed penalty notice | £1,000 |
| Second fixed penalty notice | £2,000 |
| Third fixed penalty notice | £4,000 |
| Fourth, and any subsequent fixed penalty notice | £10,000 |
The Coronavirus Statutory Sick Pay Rebate Scheme will repay employers the SSP paid to current or former employees and will be available from 26 May 2020. See here.
The scheme covers all types of employment contracts and employers will be eligible to claim if they:
- Are claiming for an employee who is eligible for sick pay due to coronavirus
- Had a payroll scheme that was created and started on or before 28 February 2020
- Had fewer than 250 employees on 28 February 2020
The repayment will cover up to 2 weeks starting from the first qualifying day of sickness, if an employee is unable to work because they either:
- have coronavirus (COVID-19) symptoms
- cannot work because they are self-isolating because someone they live with has symptoms
- are shielding and have a letter from the NHS or a GP telling them to stay at home for at least 12 weeks
- have been notified by the NHS or public health bodies that they’ve come into contact with someone with coronavirus
- they have been notified by the NHS to self-isolate before surgery
You can claim for periods of sickness starting on or after:
- 13 March 2020 – if your employee had coronavirus or the symptoms or is self-isolating because someone they live with has symptoms; or
- 16 April 2020 – if your employee was shielding because of coronavirus.
- 28 May 2020 – if your employee has been notified by the NHS or public health bodies that they’ve come into contact with someone with coronavirus
- 26 August 2020 – if your employee has been notified by the NHS to self-isolate before surgery
Employees do not have to give you a doctor’s fit note for you to make a claim. But you can ask them to give you either:
- an isolation note from NHS 111 – if they are self-isolating and cannot work because of coronavirus
- the NHS or GP letter telling them to stay at home for at least 12 weeks because they’re at high risk of severe illness from coronavirus
- the evidence from the NHS or public health body requiring them to self-isolate
You must keep the following records in relation to a claim you make under the scheme for three years:
- The reason for the employee’s absence
- Details of each period the employee could not work, including start and end dates
- Details of the SSP qualifying days when the employee could not work
- National insurance numbers for each employee you have paid SSP to
You’ll need to print or save your state aid declaration (from your claim summary) and keep this until 31 December 2024.
The Government will provide the lender with a partial guarantee (80%) against the outstanding facility balance, subject to an overall cap per lender. Note, the Government guarantee is to the lender only, the borrower will always remain 100% liable for the debt.
We understand that will make an initial claim for recovery against the borrower and will, once its normal recovery procedures have been completed, claim against the Government guarantee.
On 4 May 2020, the Government launched the Bounce Back Loan Scheme (BBLS), which is intended to cut red tape to enable smaller businesses to access finance quickly during the coronavirus outbreak.
The scheme helps small and medium-sized businesses to borrow between £2,000 and up to 25% of their turnover. The maximum loan available is £50,000.
The government guarantees 100% of the loan and there are no any fees or interest to pay for the first 12 months. After 12 months the interest rate will be 2.5% a year.
The length of the loan is 6 years, but it can be repaid early without penalty. No repayments will be due during the first 12 months.
Under the scheme, lenders are not permitted to take any form of personal guarantee or take recovery action over a borrower’s personal assets (such as their main home or personal vehicle).
Businesses can apply for a BBLS loan if it:
- is based in the UK
- was established before 1 March 2020, and
- has been adversely impacted by the coronavirus.
Any business regarded as being a business in difficulty on 31 December 2019 will need to confirm that it is complying with additional state aid restrictions.
Businesses from any sector can apply, except the following:
- banks, insurers and reinsurers (but not insurance brokers)
- public-sector bodies, and
- state-funded primary and secondary schools.
Businesses already claiming under the following schemes cannot apply although it is possible to convert an existing loan under such schemes into BBLS:
- Coronavirus Business Interruption Loan Scheme (CBILS)
- Coronavirus Large Business Interruption Loan Scheme (CLBILS)
- COVID-19 Corporate Financing Facility.
There are 11 lenders participating in the scheme including many of the main retail banks, which are listed on the British Business Bank’s website (www.british-business-bank.co.uk/ourpartners/coronavirus-business-interruption-loan-schemes/bounce-back-loans/for-businesses-and-advisors/). Applicants are directed to approach a suitable lender via the lender’s website. If an applicant is declined by a lender, they can apply to other lenders in the scheme.
The lender will ask applicants to fill in a short online application form and self-declare that they are eligible. All lending decisions remain fully delegated to the accredited lenders.
Failure to comply with the collective inform and consult obligations could impact on the fairness of any dismissals – see next question. In addition, a Tribunal can award a protective award of up to 90 days gross pay for each affected employee. The purpose is intended punish the employer for not complying with the obligations, not to compensate the employee for their individual financial loss.