Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

What is the penalty for failing to comply with the individual consultation obligations?

Failure to comply with the individual consultation obligations could render the dismissal unfair and expose you to a financial penalty of the lower of up to 1 years gross pay or the maximum statutory limit (currently £88,519).

If there is an outbreak of coronavirus in a workplace – will it be RIDDOR reportable?

The reporting requirements relating to cases of, or deaths from, COVID-19 under RIDDOR apply only to occupational exposure, that is, as a result of a person’s work.

You should only make a report under RIDDOR when one of the following circumstances applies:

  • an accident or incident at work has, or could have, led to the release or escape of coronavirus (SARS-CoV-2). This must be reported as a dangerous occurrence
  • a person at work (a worker) has been diagnosed as having COVID-19 attributed to an occupational exposure to coronavirus. This must be reported as a case of disease
  • a worker dies as a result of occupational exposure to coronavirus. This must be reported as a work-related death due to exposure to a biological agent
What fees will I pay for a loan under CBILS?

Borrowers will not have to pay a guarantee fee. Lenders will pay a fee to access the scheme. The Government will make a Business Interruption Payment to cover the first 12 months of interest payments and any lender-levied fees, allowing smaller businesses to benefit from no upfront cost.

British Business Bank has indicated that following earlier discussions with the banking industry, some lenders indicated that they would not charge arrangement fees or early repayment charges to SMEs borrowing under the scheme. Each business should check the terms of the loans being made to ensure this is the case and what the interest rate and prepayment fees will be following the period in which the Government makes payment of these amounts.  

I hold a licence but can’t trade. Can I terminate it?

A licence to occupy premises is not an interest land and operates as a commercial contract between the parties that enter into it. Licences tend to be put in place to cover short periods and consequently they are generally a lot more flexible than commercial leasing arrangements. To that extent occupants under licences should review the contract to establish whether or not there are any provision allowing them to terminate on notice to the Licensor.

Occupants under licences that are granted for longer periods without the option to terminate may try to argue that the contract has frustrated because they are effectively unable to occupy.

How might the transition to a "new normal" impact on contracts?

The workplace will not revert to its pre-Covid-19 state overnight, with social distancing in the work place likely to remain in place for quite some time to come.

This could mean that businesses will need to think carefully about how their capacity will be impacted, and how this will affect their ability to perform contractual obligations.

For example, if a business has an outsourcing contract under which it has to perform a business process, or produce a particular output, will it be able to comply with contractual performance standards whilst social distancing is still in place? In the context of a manufacturing business, what will be the impact on production schedules and delivery dates? There might also be an impact on operating costs, for example if processes are changed and additional shifts are introduced – can these additional costs be sustained?

Businesses need to plan a safe system of work for their employees to ensure they comply with Health and Safety legislation, but they also need to consider how this will impact on their ability to perform pre-existing contractual obligations. Ultimately, contractual arrangements with customers might need to remain on a revised footing for a number of months.

Getting to a point where agreement is reached on allocation of additional costs and/or changes to key elements of a contract such as scope of work, performance standards and delivery date will require co-operation between contracting parties. Again, it is important that any variations that are agreed are recorded properly and follow the required contractual procedures.