What are the data protection implications of holding Covid-19 health data?
The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/
Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.
You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.
Related FAQs
Details of your MHFAs should be posted somewhere that everyone can access easily – a specific area on an intranet or whatever alternative exists. Regular comms involving the MHFAs, webinar sessions, Q&A sessions and mental wellbeing drop in sessions are all ideas that may work well.
- On admission to critical care, the risks, benefits and likely outcomes of the different treatment options should be discussed with patients, families and carers so they can make informed decisions about their treatment wherever possible.
- A member of the critical care team should be involved in these discussions whenever the patient or team needs advice about critical care to make decisions about treatment.
If a tenant continues to refuse to take heed of the government’s social-distancing guidelines, for example by inviting large groups of people who do not reside there to their property, it can constitute a nuisance. One housing association successfully applied for an injunction. The injunction ordered by the Court stipulated that no persons, other than the children of the tenant, are to attend the property until the current social-distancing restrictions are lifted by the government.
A representative of the housing association highlighted the need for the current guidelines to be followed and the need for housing providers to ensure that all residents living in their communities are kept safe during this time of ‘unprecedented risk’.
This case demonstrates that flouting of the current restrictions is likely to be considered anti-social in the eyes of the courts – a point which all housing providers should bear in mind during this period. Further, it highlights the availability of an alternative remedy to the issuing of possession proceedings (in light of the government’s moratorium on evictions) to deal with anti-social behaviour during the next three months, Covid-19 related or not.
You must only make a report under RIDDOR (The Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013) when:
- An unintended incident at work has led to someone’s possible or actual exposure to coronavirus. This must be reported as a dangerous occurrence
- A worker has been diagnosed as having COVID 19 and there is reasonable evidence that it was caused by exposure at work. This must be reported as a case of disease
- A worker dies as a result of occupational exposure to coronavirus.
Failure to comply with the individual consultation obligations could render the dismissal unfair and expose you to a financial penalty of the lower of up to 1 years gross pay or the maximum statutory limit (currently £88,519).