What are the data protection implications of holding Covid-19 health data?
The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/
Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.
You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.
Related FAQs
As an occupier of premises, you owe a duty of care to your visitors to take reasonable care to see that the visitor will be reasonably safe in using your premises.
It is therefore essential that you are taking reasonable steps and strictly adhering to up-to-date Government advice in all aspects of your business to avoid any potential liability.
Failure to follow Government advice could leave you vulnerable to claims for compensation for pain and suffering should a visitor on your premises contract Covid-19.
However, each case will be fact-specific and it would be very difficult for a visitor to establish that they contracted Covid-19 specifically from those premises (as opposed to being exposed to the virus anywhere else).
If someone suggests that they are going to make a claim make sure that you report matters to your insurer or insurance broker immediately.
There is no minimum period of notice you are required to give employees of their return, but from a good HR practice point of view you should be speaking to your staff and letting them know what the plan is; giving people a reasonable amount of notice of return will allow them to prepare both practically and psychologically.
“Switching” is where you can transfer from one visa category to another without leaving the UK. However, in many instances where an individual wants to change from one visa category to another, they have to leave the UK and apply from the country they normally reside in.
There are currently limited concessions in place due to the pandemic where you are able to switch visas from within the UK instead of applying from overseas. These are regularly updated and so please contact us for further information.
It is unlikely that an employer can place such a requirement on staff without infringing the employee’s privacy. If the employee is acting in accordance with the rules, limiting their activity would likely be considered unreasonable.
It is. If you assess a risk and identify a control measure then fail to deploy it, then you are breaching your legal duties under HASWA and potentially committing a criminal offence. So if you decide for example that N95 respirators have to be used by everyone, you have a duty to provide them.
So the short answer is yes.