What are the data protection implications of holding Covid-19 health data?
The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/
Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.
You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.
Related FAQs
- Be alert to the fact that guidance on treating Covid-19 may change with emerging knowledge/scientific data and this may require subsequent modifications to treatment.
- Critical care staff should support healthcare professionals who do not routinely work in critical care but need to do so.
It is where the need for a role at a specific site, or the number of people performing a role, has ceased or diminished or the site closes down.
An obvious cost cutting measure is to reduce salaries, either temporarily or permanently. If you are to seek a reduction in salaries, this should be done fairly – either across the board or by selecting teams/individuals based on objective business reasons.
Note that this cannot be imposed without significant risk. Without agreement, this would need fair selection and consultation.
Mortuaries are a sui generis use, unless ancillary to some other use of land, a hospital for example.
Sui generis uses are not within any Use Class. Consequently planning permission is required for the:
- Change in the use to a sui generis use
- Subsequently for the change in the use to an alternative use, whether that be another sui generis use or a use within a Use Class
Acknowledging the above, if the scale of the use is above de minimis, planning permission is likely to be required to change the use of a warehouse or factory unit into a temporary mortuary.
Should planning control be breached, a local planning authority must decide whether to take enforcement action or not. That enforcement is discretionary was recently reiterated in a Ministerial Statement issued on 13 March 2020 a link to which is below.
Depending on the form of the enforcement action, there could be a right of appeal.
The reality of these unprecedented times is that enforcement of health and safety legislation by the HSE (particularly through the criminal courts) in relation to Covid-19 is an extremely unlikely outcome.