Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

Can we ask for proof of caring responsibilities and if so what would be reasonable proof?

Yes, but be reasonable and sensitive to avoid any claims of associative or indirect discrimination.

Do I have to continue to pay furloughed staff while furloughed? Can I wait until I receive the money from the government?

To qualify for a grant under the scheme you must pay your furloughed staff the wages you are claiming for. Failure to do so may result in a HMRC investigation and/or claims from furloughed staff for unlawful deductions from wages and possibly constructive dismissal claims.

Normal benefits including non-monetary benefits should continue during furlough unless the individual has agreed in writing to reduce or remove a benefit during this time.

Employers are expected to apply for one or more of the financial support schemes available to be able to continue to pay staff.

What is the current guidance for court of protection hearings?

The current guidance issued by Mr Justice Hayden confirms that remote hearings may be conducted using the following facilities and that this will be the default position until further direction:

  • By way of an email exchange between the court and the parties;
  • By way of telephone using conference calling facilities;
  • By way of the court’s video-link system, if available;
  • The use of the Skype for Business App installed on judicial laptops;
  • Any other appropriate means of remote communication, for example BT MeetMe, Zoom or FaceTime.
What is the difference between individual and collective consultation?

Where it is envisaged that 20 or more employees will be dismissed at a relevant establishment within a 90 day period or less, then collective consultation is required (in addition to individual consultation) and the company must inform BEIS (using form HR1).

If there are less than 20 dismissals then you are only required to carry out individual consultation.

What guidance has the Government given in relation to contracts in relation to Covid-19?

On 7 May the Government published guidance on how contracting parties can act responsibly in order to assist the effort to deal with Covid-19. The guidance seeks to persuade contracting parties to act reasonably and recognise the impact of Covid-19 on contractual counterparties. This will continue to be relevant as business begins to emerge from lockdown.