What are the data protection implications of holding Covid-19 health data?
The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/
Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.
You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.
Related FAQs
It is a theoretical possibility that “anti-vax” beliefs could be a philosophical belief under the Equality Act 2010 and therefore anti-vaxers have the right not to be discriminated against for their beliefs. Much will depend on why the individual is against the vaccine. Conspiracy theorists (the vaccine is being used as an opportunity to monitor you or it’s all because of 5G) are highly unlikely to be treated as having a philosophical belief!
The CMA is particularly concerned about certain activities, its guidance highlights:
- Exchange of commercially sensitive information where this is not necessary in response to the crisis
- Collaboration which unfairly excludes third parties
- Abuse of a dominant position (including a dominant position held as a result of the crisis) – particularly to charge excessive prices
- Seeking to maintain prices or prevent reductions in prices
- Cooperation going beyond what is necessary to respond to the crisis in the interests of consumers
The Government has produced workplace guidance for employers, setting out 2 key messages for employers:
- Continue to make workplaces as safe as possible; and
- Encourage workers to heed any notifications to self-isolate and to support them while they are require to isolate
Government guidance can be accessed here: How it works (an overview) and Workplace guidance for employers.
£370 million will be available to support small and medium-sized charities who are at the heart of local communities and which are making a big difference during the outbreak, including those delivering food, essential medicines and providing financial advice. These monies will be distributed by organisations including the National Lottery Community Fund for those in England. It is understood these monies will need to be applied for. The application system for the National Lottery Community Fund grant pot is expected to be operational within a period of weeks.
As an occupier of premises, you owe a duty of care to your visitors to take reasonable care to see that the visitor will be reasonably safe in using your premises.
It is therefore essential that you are taking reasonable steps and strictly adhering to up-to-date Government advice in all aspects of your business to avoid any potential liability.
Failure to follow Government advice could leave you vulnerable to claims for compensation for pain and suffering should a visitor on your premises contract Covid-19.
However, each case will be fact-specific and it would be very difficult for a visitor to establish that they contracted Covid-19 specifically from those premises (as opposed to being exposed to the virus anywhere else).
If someone suggests that they are going to make a claim make sure that you report matters to your insurer or insurance broker immediately.