Will the golden thread requirements in relation to maintaining a central record of building info be retrospective?

An employer has a duty of care to its workforce and must take reasonable precautions to protect the health and safety of employees. Employers also have a duty of care towards anyone entering or using their place of business, such as visiting clients or customers.

This means that if an employer reasonably believes that wearing face masks at work is appropriate and necessary, it can issue an instruction to employees to this effect and employees should abide by this as far as possible.

However employers should be cautious about introducing and enforcing a policy across its business which requires its staff to wear face masks as there is the risk of unlawfully discriminating against people who are exempt from wearing face coverings or have legitimate reasons for not doing so. An employer should also consider the duty to make reasonable adjustments for disabled employees and discuss any concerns raised by employees who do not want to or feel unable to wear a mask.

The Government has introduced new regulations, which took effect on 14 May 2020, to relax the publicity requirements in respect of planning applications.

Planning applications are usually required to be publicised by way of site notices and local newspaper notices and applications are to be made available for public inspection. The Government has recognised that these actions may not always be possible in accordance with social distancing guidelines and in order that Councils do not delay applications as a result of an inability to comply with the publicity requirements, the Government has relaxed the requirements.

A Local Planning Authority is now required to “take reasonable steps” to publicise a planning application, which may be through use of online newspapers, social media, or other electronic measures. What is considered reasonable will depend upon the circumstances of an individual application and will be proportionate to the scale and impact of the development. A large development that has previously generated significant interest will require more steps to bring the application to the attention of all of those with an interest than a householder application. The guidance emphasises the role of the publicity requirements, namely to enable those with an interest to make representations and to effectively participate in the decision making process and therefore community engagement remains key. It is recommended that the officer’s report refers to the steps taken where a Council has relied upon the temporary publicity arrangements.

The requirement to make planning applications available for public inspection has also been temporarily suspended providing that the applications are available for online inspection. In reality most LPAs already provide such an online facility. Where individuals are unable to access an application online LPAs should make alternative arrangements, for example providing information over the phone or providing a hard copy set of documents by post.

The regulations however only amend the statutory publicity requirements. In addition to these, all LPAs are required to have a Statement of Community Involvement which may provide for additional publicity requirements and the LPA will be bound by these regardless of the temporary relaxation of any statutory requirements. Where a Statement of Community Involvement does go beyond the statutory requirements, the Government guidance suggests that LPAs update these to ensure that local communities can continue to be consulted in the current climate.

The regulations are currently due to expire on 31 December 2020.

Employers will be collecting and sharing health information. Health information is sensitive and higher data protection standards apply. Here are a few key pointers.

• Update privacy notices to cover the new collection and sharing of employees’ information and provide these to the workforce. Be transparent and fair.
• Identify the legal basis and condition for use of this information and put any required paperwork in place. The ICO guidance will help. For some conditions such as the employment condition, an Appropriate Policy Document (APD) will be required. The ICO has an APD template.
• Only use the information for the purpose of managing the workforce during the pandemic.
• Only collect or share information if it’s necessary – if it’s a targeted and proportionate way of achieving your purpose.
• Make sure any health information collected and shared is accurate – there may be serious consequences if it’s not.
• Work out how long the information must be kept for. Keep a record of that period and act on it at the appropriate time.
• Security is very important – there may be malicious actors trying to trick employers and employees. Make sure employees know how to identify a genuine NHS Test and Trace contact. Keep the information secure. Use the ICO’s data sharing checklists** and keep a record of the disclosures made and why. Control external disclosures – only certain authorised members of staff should make them.
• Make sure individuals can still exercise their data protection rights – that’s also very important. Keep data protection records up-to-date and ensure any exports of personal information outside the UK are compliant.
• Before introducing employer-led testing like taking temperatures, thermal imaging or other potentially intrusive tests, work out if a data protection impact assessment (DPIA) is required. It will be if the intended processing is ‘high risk’. If it is, then carry out a full DPIA. It will help address the issues systematically and mitigate risks.
• All this demonstrates ‘accountability’ – it shows affected individuals and the ICO that the employer is complying with data protection requirements.

If you need further help, please visit the ICO’s data protection and coronavirus information hub or ask our data protection team.

** Please note that this link is to the ICO’s existing checklists and data sharing code of practice. We will update the link to the ICO’s new checklists after they are published.

Although an employer is obliged to conduct consultation “with a view to reaching an agreement”, it is not required to actually agree to any counter proposals made by the employee representatives. Merely to consider them in good faith.

If such testing is regarded as a “reasonably practicable step” which has been identified as an appropriate control following a risk assessment then it is something you can do.

Although you can’t physically force someone to have something intrusive done, this is very likely to be a reasonable management instruction and therefore if someone refuses to have this done as a condition of entry into the work place then disciplinary action may follow.

Where this is something that is required of employees, employers should be letting their staff know that this is one of a number of measures that are being introduced into the workplace for their own safety. If the employer can explain, in advance of the return, why temperature checks need to be taken, what the consequences of the results will be- i.e. will they be sent home if over a certain temperature, whether this data will be stored (and if the sole purpose is to determine whether or not they are fit to attend work on a particular day then why are they being stored), and the fact that temperature checks are a requirement of entry to company premises for everyone, then there shouldn’t be significant resistance to this measure.

Large scale temperature checks have in some businesses become part of the “new normal” working environment.