Skip to content

What do we need to do?

Privacy policy – You must make sure the relevant privacy policies deal with how you will process Covid-19 data. You should have an employee privacy policy and this may already deal with health data (if it doesn’t, it should). You might also need to look at privacy policies for customers, visitors and suppliers. This ensures that processing is lawful, fair and transparent.

Lawful processing conditions – You will need to consider which processing conditions you are relying on (remembering that you need both an Article 6 condition and an Article 9 condition – this is the part of the GDPR which deals with special category data). As a lot of the data you collect will be about employees, you can’t use consent so you will have to find another lawful reason under GDPR which allows you to process the data.

Appropriate policy document – When you are considering your Article 9 processing conditions, remember you must also have an “appropriate policy document” in place.

Processing record – Finally make sure your processing record is up to date with information on what data you collect and use.

Related FAQs

How do I make a Will while I am self-isolating?

Your lawyers can take your instructions by telephone, Skype, Zoom or a similar tool. However, the formal requirement to make a valid Will requires two witnesses to be present with you when you sign the Will and they must then add their signatures. The witnesses or their spouse cannot be beneficiaries or they will forfeit their inheritance.

The main challenge is how to have your witnesses with you at a time when we are being advised to socially distance. One option would be for the witnesses to stand outside your window or at a safe distance from you where they have a clear line of sight. The witnesses can watch you sign and then you could post your Will through your letterbox or leave it on a surface for them to pick up so that they can then sign their names too. If the witnesses live together then they do not need to keep two meters apart from each other.

The Wills Act 1837 requires that your witnesses must be physically present when you sign your Will and therefore it is not possible to do this by Skype, Zoom or similar video conferencing means. You may however want to video record the process by which you and your witnesses signed your Will so that you have a record of what was done, particularly if you are worried that someone might challenge the validity of your Will in due course.  You can of course re-execute your Will once social distancing has been relaxed if you are particularly concerned.

Be aware that the virus can remain on documents for more than 24 hours so it would be sensible for everyone to wear disposable gloves and in any event to wash hands thoroughly after handling the Will.

Emergency legislation may be passed regarding the requirement to make a valid Will but you must follow the current rules unless or until new legislation is passed.

What are the data protection implications of homeworking?

The Information Commissioner’s Office (ICO) announce new guidance in light of coronavirus.

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

The ICO has stated the following:

Data protection is not a barrier to increased and different types of homeworking. During the pandemic, staff may work from home more frequently than usual and they can use their own device or communications equipment. Data protection law doesn’t prevent that, but you’ll need to consider the same kinds of security measures for homeworking that you’d use in normal circumstances.”

Whether you work from home or in the office, you still need to comply with data protection laws. While you need to process personal data with the same care you use in the office, the home working environment throws up specific data protection concerns particularly in respect of data security. You should make sure you have a home working policy which deals with data protection and these data security issues.

 Organisations must ensure that, for staff who can work from home, their obligations in respect of processing personal data are clearly communicated. Organisations may already have a home working policy – if this is the case, then this should be reviewed to ensure it remains relevant and up-to-date for practices during this pandemic.

Who decides on carrying-over holiday entitlement?

The Regulations do not require any prior agreement between an employer and employee that it was not reasonably practicable for holiday to be taken for it to be carried over.

However, if an employee requests holiday then an employer must have ‘good reason’ for refusing it due to coronavirus. The term ‘good reason’ is not defined so the Government will expect employers, employees and (if necessary on any dispute) the Courts to apply common sense.

The Regulations are not confined to key workers so could, in principle, be used by employers for a wider range of employees.

The Government guidance suggests that the following factors should be taken into account when considering whether it was reasonably practicable to take the leave in the relevant year:

  • Whether the business has faced a significant increase in demand due to COVID-19 that would reasonably require the worker to continue to be at work and cannot be met through alternative practical measures.
  • The extent to which the business’ workforce is disrupted by COVID-19 and the practical options available to the business to provide temporary cover of essential activities.
  • The health of the worker and how soon they need to take a period of rest and relaxation.
  • The length of time remaining in the worker’s leave year.
  • The extent to which the worker taking leave would impact on wider society’s response to, and recovery from, the effects of COVID-19.
  • The ability of the remainder of the available workforce to provide cover for the worker going on leave.
What is the current guidance relating to Private Finance Initiatives and PF2 Projects in light of coronavirus?

On 2 April 2020, the Government issued guidance relating to Private Finance Initiatives and PF2 Projects. The guidance, which is to be enforced with immediate effect (currently due to stay in place until 30 June 2020), is one of several guidance notes issued to date.

A link to the guidance is set out below:

https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/877804/2020_04_01_PFI_and_COVID19_final.docx.pdf

Key messages to contracting authorities

  • PFI contractors should very much consider themselves as being part of the public sector response to the current pandemic
  • Covid-19 is not regarded as, and is not to be classified as a force majeure event
  • PFI contractors must ensure that contingency plans are up to date and have been reviewed and discussed with contracting authorities to enable the continuity of full services to respond to the pandemic and maintain vital public services
  • Contracting authorities should work closely with PFI contractors to use all available options to maintain public services during the emergency period
  • Local arrangements should be made where PFI contractors can’t deliver the agreed requirements and performance standards
  • “Best efforts” should be made by all parties for the continuation of service provision
Can I ask my employees to travel for work during the national lockdown?

As above, people must not leave their home unless they have a ‘reasonable excuse’ and travelling should be limited to their local area. Employees may leave their home and local area to travel for work if they cannot reasonably work from home. You should attempt to reduce the number of journeys they make.