What do we need to do?
Privacy policy – You must make sure the relevant privacy policies deal with how you will process Covid-19 data. You should have an employee privacy policy and this may already deal with health data (if it doesn’t, it should). You might also need to look at privacy policies for customers, visitors and suppliers. This ensures that processing is lawful, fair and transparent.
Lawful processing conditions – You will need to consider which processing conditions you are relying on (remembering that you need both an Article 6 condition and an Article 9 condition – this is the part of the GDPR which deals with special category data). As a lot of the data you collect will be about employees, you can’t use consent so you will have to find another lawful reason under GDPR which allows you to process the data.
Appropriate policy document – When you are considering your Article 9 processing conditions, remember you must also have an “appropriate policy document” in place.
Processing record – Finally make sure your processing record is up to date with information on what data you collect and use.
Related FAQs
Ultimately closing a service will be a decision that is taken at the highest level and that decision will depend on risk appetite. Often these types of higher risk are mitigated by way of insurance but that still depends on an insurer being willing to accept that risk. This decision will depend on accepting a known risk and its consequences.
You should speak to your advisors. We do not know presently how existing petitions will be dealt with by the Court. We do know that if any winding up order is made (based on a petition presented after 27 April), it could be found to be void and a creditor may face challenges. Even for petitions presented before 27th April, there is a risk that the Court will not be keen to make a winding up order so it is important that you look at the facts of your debt and weigh up all of the factors before deciding how to proceed.
It is worth pointing out that, despite all the guidance, survey results and other advice about managing Covid-19 H&S risk in the workplace, the law has not been changed. None of the guidance is codified by regulation/legislation, which means that you are managing this risk in the context of existing H&S law.
In very simple terms, HASWA74 requires employers to take “all reasonably practicable steps” to ensure the health and safety of its employees (and anyone else affected by your business).
“Reasonably practicable” means to balance risk reduction against the time, money and effort required. If measures are grossly disproportionate, you wouldn’t be expected to take them, but there is a strong presumption in favour of taking any steps which will protect workers.
As part of managing the health and safety of your people, you must control the risks in your workplaces. To do this, look for what might cause harm to people while they work and decide whether you are taking reasonable steps to prevent that harm. This related duty under MHSWR is to ensure you undertake a “suitable and sufficient assessment of risks.”
In recognition of the problems that the current situation is causing, the UK IPO classed the 24th March and all subsequent days as “interrupted days” which means that deadlines that fall within this period will be extended until the UK IPO declares that the interrupted days have ceased. As lockdown has begun to be eased, the IPO has now reviewed its position and has confirmed that the “interrupted days” period will come to an end on the 29 July 2020. This means that Thursday 30 July 2020 will be the first normal day of operation, therefore all “interrupted days” deadlines will expire on this day. Similarly, if your deadline falls after the period of interruption ends, this deadline will not be automatically extended.
The IPO is conscious that many businesses may still be in challenging positions when the period of “interrupted days” end. They will endeavour to continue to provide flexibility and support to assist businesses with their applications. They hope to temporarily remove fees for requests for extensions of deadlines, and will give further updates when this fee exemption is in place.
The IPO continues to encourage applicants to meet original deadlines where they are able. As their offices are closed, the UK IPO is not currently processing paper forms (i.e. hard copy) and faxes. However, they are processing forms which have been submitted electronically, or via email and have made a new email address available for the submission of forms.
Intellectual Property Offices covering other territories have made their own announcements about the extension of deadlines. The EUIPO’s period of extension of deadlines came to an end on the 18th May. However, they have published a Guidance Note and accompanying webinar on the EUIPO website, detailing options for parties who may struggle to meet deadlines and remedies for those who may have missed deadlines.
The current position is that the PSC is responsible for assessing whether IR35 applies. This current regime has been difficult to police by HMRC and HMRC considers there is widespread flouting of the rules by contractors.
From April 2021 the responsibility for assessing whether IR35 applies will shift to the end user/client (with the exception of ‘small’ companies) which will require an assessment to be carried out on a contract by contract basis. HMRC anticipates that this will be easier to monitor and that end user businesses will be more compliant.
The reformed regime will apply to payments made on or after 6 April 2021 for services carried out on or after this date.