Skip to content

What do we need to do?

Privacy policy – You must make sure the relevant privacy policies deal with how you will process Covid-19 data. You should have an employee privacy policy and this may already deal with health data (if it doesn’t, it should). You might also need to look at privacy policies for customers, visitors and suppliers. This ensures that processing is lawful, fair and transparent.

Lawful processing conditions – You will need to consider which processing conditions you are relying on (remembering that you need both an Article 6 condition and an Article 9 condition – this is the part of the GDPR which deals with special category data). As a lot of the data you collect will be about employees, you can’t use consent so you will have to find another lawful reason under GDPR which allows you to process the data.

Appropriate policy document – When you are considering your Article 9 processing conditions, remember you must also have an “appropriate policy document” in place.

Processing record – Finally make sure your processing record is up to date with information on what data you collect and use.

Related FAQs

Which charities will benefit from this funding and when – Key Services?

The Government will allocate £360 million to charities providing key services and supporting vulnerable people during the crisis.  £200 million of this amount will be paid to Hospices UK to be distributed to hospices to help increase capacity and give stability to the sector.  The remaining amount is to be allocated to:

  • St Johns Ambulance to support the NHS
  • victims charities, including domestic abuse, to help with potential increase in demand for charities providing these services
  • charities supporting vulnerable children, so they can continue delivering services on behalf of local authorities;
  • disabled people
  • Citizens Advice Bureau to increase the number of staff providing advice during this difficult time

The Government Departments will identify priority recipients, with the aim that these charities will receive money in the form of a cash grant over the next few weeks and by the end of April to assist in paying amongst other costs April’s wage bill.

How can the State aid rules be applied in light of the coronavirus outbreak?

The coronavirus outbreak has seen State support being given to businesses on an unprecedented scale.

This issue is likely to be increasingly relevant as Governments seek to protect and stimulate their economies as they emerge from lockdown.

How have the rules been relaxed in the context of the crisis and what facets of the existing law can be used for the State to provide support to undertakings?

What are the existing legal obligations to conduct a suitable and sufficient assessment of risk for a workforce, and where particular characteristics require it, for individuals?

It is the individual assessment by an organisation of its Covid-19 risk in its workplace that will be central. There may be common features across sites or areas of a site but every workplace will have a different risk profile depending on the service it offers and the workers who deliver those services.  No one size fits all.

The context of managing Covid-19 risk is the need to tie in with UK government guidance and HSE advice – which despite being a lot more comprehensive than it was, is not a panacea and will continue to evolve.  The difficulty we have with this in the context of the known increased risk to BAME employees from Covid-19 is that our understanding of the risk is, we would suggest, at a pretty early stage which makes it more difficult to address. However we know the increased risk exists and we owe our BAME workers a duty to manage that risk and keep them safe.

We also have a duty to consult employees.  This is critical in managing this risk – ensuring BAME workers have a loud voice in the assessment process will be very important.

Where an individual has a particular characteristic, for instance they’re pregnant, they have physical or mental disabilities etc, the law requires us to look at that individual or, where it is a group, that group of individuals and assess the risk to them and take any reasonably practicable steps to control the risk to them.

Risk control hierarchy is key. In “normal” businesses we reduce our Covid-19 risk by keeping people away from the workplace – “avoid, eliminate and substitute” then changing work practices (e.g. social distancing measures) before we arrive at PPE. In a healthcare context, we arrive at PPE a lot more quickly.

We need to ensure our people are given sufficient information, instruction and training so they can do their jobs safely and we must consult workers and involve them in workplace safety – this is going to be critical in the context of Covid-19.

Does this apply to bankruptcy petitions?

No. This bill relates to corporate insolvencies only. Should you require any advice as to personal insolvency situations, please contact our team.

VIDEO: Force majeure during the coronavirus pandemic

Commercial partner Damien Charlton explains the basic principles of force majeure, and how they are relevant in the current extreme circumstances caused by the Covid-19 pandemic.