Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

Other considerations – the mental health and wellbeing of BAME staff and others

Undeniably and understandably BAME staff, as well as those staff who are identified as being at a higher risk, are going to have high levels of stress and anxiety. For some, this may become of such severity that those staff should be considered to be disabled under the Equality Act 2010. The question as to whether someone is disabled is one that should be answered in conjunction with appropriate medical advice. But the question about how to support any staff suffering with stress and anxiety should not be left until that stage. Proactive steps need to be taken and expert advice obtained on what support measures should be put in place. We know that many NHS organisations are already giving the mental wellbeing of their staff the highest priority.

From our perspective, we would ask managers to be mindful that stress and anxiety is likely to feature in how an individual reacts to questions about the level of risk to their health and the impact on their duties. The conversations with some staff may not be easy to have and may be met with challenge.

For those staff who’s stress and anxiety is such that it would qualify as a disability, reasonable  adjustments will need to be considered to the processes that you are applying.

An additional point to consider – it might be worth writing to all staff, asking them to come forward if they have any health conditions that they think you ought to be aware of, assuring them that such information is being given in the strictest confidence. You want to make sure that you are taking the appropriate measures to ensure their health and safety.

Coronavirus Statutory Sick Pay Rebate Scheme

The Coronavirus Statutory Sick Pay Rebate Scheme will repay employers the SSP paid to current or former employees and will be available from 26 May 2020. See here.

The scheme covers all types of employment contracts and employers will be eligible to claim if they:

  • Are claiming for an employee who is eligible for sick pay due to coronavirus
  • Had a payroll scheme that was created and started on or before 28 February 2020
  • Had fewer than 250 employees on 28 February 2020

The repayment will cover up to 2 weeks starting from the first qualifying day of sickness, if an employee is unable to work because they either:

  • have coronavirus (COVID-19) symptoms
  • cannot work because they are self-isolating because someone they live with has symptoms
  • are shielding and have a letter from the NHS or a GP telling them to stay at home for at least 12 weeks
  • have been notified by the NHS or public health bodies that they’ve come into contact with someone with coronavirus
  • they have been notified by the NHS to self-isolate before surgery

You can claim for periods of sickness starting on or after:

  • 13 March 2020 – if your employee had coronavirus or the symptoms or is self-isolating because someone they live with has symptoms; or
  • 16 April 2020 – if your employee was shielding because of coronavirus.
  • 28 May 2020 – if your employee has been notified by the NHS or public health bodies that they’ve come into contact with someone with coronavirus
  • 26 August 2020 – if your employee has been notified by the NHS to self-isolate before surgery

Employees do not have to give you a doctor’s fit note for you to make a claim. But you can ask them to give you either:

  • an isolation note from NHS 111 – if they are self-isolating and cannot work because of coronavirus
  • the NHS or GP letter telling them to stay at home for at least 12 weeks because they’re at high risk of severe illness from coronavirus
  • the evidence from the NHS or public health body requiring them to self-isolate

You must keep the following records in relation to a claim you make under the scheme for three years:

  • The reason for the employee’s absence
  • Details of each period the employee could not work, including start and end dates
  • Details of the SSP qualifying days when the employee could not work
  • National insurance numbers for each employee you have paid SSP to

You’ll need to print or save your state aid declaration (from your claim summary) and keep this until 31 December 2024.

Does a sponsor need to report a change in workplace if a Tier 2 visa holder is working from home as a result of Covid-19?

No. The Home Office has confirmed that sponsors do not need to report sponsored workers as working from home, where this is directly related to the coronavirus outbreak.

However any UK employers who sponsor overseas workers, should also ensure that they remain compliant with their other sponsor licence duties, which includes reporting any change to an employee’s salary and duties.

I’m in the process of litigation. What happens during the coronavirus outbreak?

The best advice is that parties should proceed as they would have done before the crisis began.

Do you have to reach agreement during collective consultation?

Although an employer is obliged to conduct consultation “with a view to reaching an agreement”, it is not required to actually agree to any counter proposals made by the employee representatives. Merely to consider them in good faith.