Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

The Media

The BBC

The national broadcaster’s collated content surrounding the Covid-19 pandemic:
https://www.bbc.co.uk/news/coronavirus

and with regards to business:
https://www.bbc.co.uk/news/business

Do I have to quarantine for 14 days when arriving in the UK?

From 8 June 2020, people entering the UK from overseas (excluding those entering from Ireland, the Channel Islands or the Isle of Man) must comply with a mandatory 14 day quarantine period. However, for those travelling to England, a number of country specific exemptions have been introduced.

A full list of the countries excluded from the quarantine provisions can be found on the gov.uk website which change on a regular basis, often on short notice.

Where a quarantine period does apply, a person will not be able to leave the place they are staying in for 14 days, except in some very limited circumstances.

These rules will apply to both British and foreign nationals, however there are some further exemptions to this rule where a person is coming to the UK to undertake a certain role (such as a healthcare professional coming to the UK to provide essential healthcare). A full list of the narrow exemptions can be found on the gov.uk website.

Before travelling, individuals will be asked to provide their contact details and information about their journey and the accommodation that they will be self-isolating in. To do this, individuals will need to fill in an online form on the gov.uk website. Individuals who refuse to fill in this form may be fined £100 and/or denied entry at the UK border should they not be a British citizen or UK resident.

The information provided in the form will ensure that the Government can check that an individual is self-isolating at the address given. Where an individual refuses to self-isolate they can be fined £1,000 if they are staying in England or Wales.

Once visa application centres re-open overseas and UK visa applications are processed, this 14 day period will need to be taken into consideration and may require employment start dates in the UK to be delayed.

When does IR35 generally apply?

It would apply if the contractor uses an intermediary to provide their services or labour and they would be deemed to be an employee or office holder for tax purposes if they were hired directly by the end user client rather than via the intermediary PSC. This would of course require an assessment of employment status for tax purposes.

Contractors who are not taxed in the UK and supply their services exclusively from outside of the UK are unaffected.

If IR35 applies, tax and NIC’s should be deducted under PAYE by the PSC. In reality this has not been happening so a major reform of the regime was due to be implemented in April 2020. The changes were postponed by one year and are due to take effect from 6 April 2021.

“Within IR35” means a contractor arrangement is caught by IR35 and the individual should be taxed as an employee.

“Outside IR35” means a contractor arrangement is not caught by IR35 and the contractor status is fine.

Am I obliged to offer staff flexible furlough?

No, there is no obligation on employers to offer a flexible furlough arrangement to staff. Operationally, flexible furlough may not be appropriate for your business and equally, returning on a part-time basis may not be suitable for individuals already furloughed for various reasons. Concerns about returning to work part-time or at all should be considered on a case-by-case basis.

Can I use flexible furlough to utilise an employee's holiday entitlement?

Employees are generally permitted to take holidays during furlough. However, Government guidance has been updated to state that “Employees should not be placed on furlough for a period simply because they are on holiday for that period.” If a period of furlough happens to coincide with an employee’s holiday then you should ensure that there are business grounds to support furlough being used in that instance so that it isn’t just being used as a means to fund holiday utilisation.