What rules has the European Commission introduced?

That will depend on the terms of your facility and the stance taken by your bank.

Banking facilities often place obligations on businesses to stick to certain financial criteria. For example, an obligation to keep turnover or profit above certain levels or a commitment to keep the bank’s exposure within an agreed percentage of the value of the company’s assets (known as loan to value ratio).

The consequences of breaching those covenants will depend on the terms of your facility, but normally this amounts to an event of default. Events of default can result in the loan (or whatever form the facility takes) becoming repayable and could give the bank certain powers to take action to recover the money that they are owed.

Whether the bank will take action during these unprecedented times is another matter, particularly given the extent of support being offered to businesses via mainstream lenders and the political desire to keep viable businesses up and running. Lenders themselves will no doubt wish to remain supportive where possible. The underlying performance of the business (and whether but for the effects of Covid-19 it would have been in a healthy financial position), the relationship you have with the bank and your history with them will no doubt be relevant to the approach taken by the bank. However, early engagement with your bank (as well as other key stakeholders in the business) will be important.

With the exception of the Covid-19 Corporate Financing Facility (see below), there was initially little dedicated financial assistance for medium-sized and larger businesses affected by the coronavirus outbreak (the so-called “stranded middle”); however, from 20 April 2020 such businesses (with a turnover above £45 million) have been able to access finance via the Coronavirus Large Business Interruption Loan Scheme (“CLBILS“).

CLBILS operates in a similar manner to CBILS except that a lender can provide:

• up to £25 million to businesses with turnover from £45 million up to £250 million; and
• up to £50 million to businesses for those with a turnover of over £250 million.

Finance is available in the form of:

• term loans
• revolving credit facilities (including overdrafts)
• invoice finance and
• asset finance,

in each case available on repayment terms of up to three years.

Several changes to CLBILS took effect from 26 May 2020. The maximum amount available through CLBILS to a borrower and its group increased from £50m to £200m. Term loans and revolving credit facilities over £50m will be offered by CLBILS lenders which have secured additional accreditation. The maximum size for invoice finance and asset finance facilities remains at £50m. Companies borrowing more than £50m through CLBILS will be subject to further restrictions on dividend payments, senior pay and share buy-backs during the period of the loan. Further information on the most recent changes, including new provisions on seniority of CLBILS facilities, can be found on the CLBILS page on the British Business Bank website. There is also an in-depth FAQs section for businesses, which has the full details of the changes to the scheme.

Unlike CBILS, the UK government will not make payments to cover the interest and any lender-levied fees in the first 12 months of any facility so these larger businesses will not benefit from the no upfront costs and lower initial repayments that smaller businesses eligible for CBILS benefit from. The other key provisions of CLBILS, such as the eligibility criteria, the 80% government-backed guarantee and security, are similar to those of CBILS.

Eligibility is similar to CBILS and businesses must:

• Be UK-based in its business activity
• Have an annual turnover of more than £45 million
• Have a borrowing proposal which the lender would consider viable, were it not for the current pandemic, and for which the lender believes the provision of finance will enable the business to trade out of any short-term to medium-term difficulty
• Self-certify that it has been adversely impacted by the coronavirus (COVID-19)
• Not have received a facility under the Bank of England’s Covid Corporate Financing Facility.

Businesses from any sector can apply, except the following:

• Credit institutions (falling within the remit of the Bank Recovery and Resolution Directive), insurers and reinsurers (but not insurance brokers)
• Building Societies
• Public-sector bodies
• Further-education establishments, if they are grant-funded
• State-funded primary and secondary schools

All lending decisions remain fully delegated to the accredited lenders.

The reaction from NCVO is that this is an important first step.  However, it will not stop well run charities from closing and others will look very different in a few months’ time.

You also need to consider other aspects of data protection.

Be proportionate – only gather and use Covid-19 data where you need to.

Keep data to a minimum – you shouldn’t gather more data than you need. You need to know someone has Covid-19 but you don’t need to know all their symptoms. Data minimisation also applies to who gets access to the data. It’s unlikely that a spreadsheet, accessible to everyone updating them on the health status of all employees, would be appropriate. Data should be shared on a need to know basis. You need to balance the privacy of individuals against your duty of care to be responsible with regards to the data of your employees, visitors, customers and suppliers.

Keep it up to date – make sure you update data. People’s health status will change and if you keep a record of this, you need to  make sure it is accurate and up to date (although this doesn’t mean you should batter individuals with constant requests for updates on health status. Again, be proportionate).

Identify individuals only when you need to – although you will need to know who has Covid-19, that doesn’t mean you need to tell everyone in the organisation. As soon as you can, you should remove personal data from any information you gather. For example, you might want to update employees on the health status of their fellow employees but you probably don’t need to name individuals and even if you feel it is necessary, you should keep the information you provide to a minimum. Removing personal identifiers in a document is also a good data security technique.

Keep the Covid-19 health data secure – Covid-19 data will be special category data and deemed high risk. This means that if you have a breach of this data you will need to notify it to the ICO. A breach could happen by someone losing a print-out of the names of Covid-19 employees, customers or visitors. It could also happen if you set access rights to lists of Covid-19 sufferers open to more people than need to know the information. The risk of ICO enforcement action increases with the potential harm the disclosure could cause. Although the ICO has indicated that it will be understanding about the impact of Covid-19 on normal operations, this doesn’t mean that they will not prosecute you if the breach is sufficiently serious.

Destroy the data once you don’t need it – Finally, of course, make sure that you delete data at the end of your needs. This might last longer than the pandemic, for example if you have an insurance claim or ongoing litigation. If you do need to keep it, consider whether or not you can delete some of the data to minimise what you hold.

There is no simple answer.

The NFCC guidance states:

“The person-centred fire risk assessment is intended only as a simple means for non-specialists who have suitable understanding of relevant fire risks to determine whether additional fire precautions might be needed. The person who carries out the person-centred fire risk assessment will depend on the circumstances of the housing and support provision. It can be carried out by those who regularly engage with the resident, with input from specialists where necessary. Assessments will normally be undertaken with residents themselves.

In sheltered housing with scheme managers, the scheme managers normally engage with residents on a routine basis, enabling residents who need a person-centred fire risk assessment to be identified. Many vulnerable residents will be in receipt of care, so enabling the care provider to identify residents in need of a person-centred fire risk assessment. Providers of regulated care are required to take into account risks to people from their wider environment, to take steps to help people ensure that they are dealt with by appropriate agencies, or to raise safeguarding alerts when this is appropriate. Where a ‘stay put’ strategy is adopted, there will be a need to identify residents who need assistance from the fire and rescue service to evacuate the building.

In supported housing, the number of residents in each property is usually quite small. This, and the nature of the care service normally provided, enables person-centred fire risk assessments to be carried out asa matter of course, when a resident first moves into the property.

Where additional fire precautions cannot be provided in the short term, the risk should be reduced as far as reasonably practicable and an adult at risk referral should be made to Adult Social Care.”

Ideally then the RP will need to engage with any care providers in order to conduct the PCRA and identify risk mitigation measures. If they are reluctant to do so, the RP should engage with the individual in any event in undertaking the assessment.