Are all employees required to stay at home?

If a contract contains a force majeure clause this may become operative due to the coronavirus pandemic and related emergency legislation. Such clauses exist to ensure that if some unforeseen event prevents a party from being able to perform their obligations under a contract, either on time or at all, they will be excused from their obligations and not be held liable for non-performance.

The clause must actually be written into the contract to have effect – a force majeure clause cannot be implied into a contract. Whether it can be relied on by a party will depend on the wording of the clause itself as it may only be applicable in certain limited circumstances.

You should seek legal advice at an early stage if you think that force majeure is relevant, because a number of potentially complex issues must be addressed, many of which will turn upon the exact wording of the force majeure clause in the contract in question:

• Has a force majeure event actually arisen?
• What notification process do you have to follow to rely on the provision?
• What mitigation steps do you have to take?
• What is the effect of the force majeure event – is the contract suspended, or can it be terminated (which might not be what you want)?

Many policies will only provide business interruption cover if it arises from property damage. The FCA has acknowledged that insurers are entitled to reject claims in relation to such policies, notwithstanding the success of the FCA’s test case in the Supreme Court, and which was generally favourable to policyholders [Insert a link here to our update on the test case]. In other cases the policy wording will be less clear and businesses may legitimately feel that their insurer is wrongly withholding payment.

One route of challenge to an insurer’s decision is via one of the well-publicised class actions. Another route of challenge is by a complaint to the Financial Ombudsman Service (FOS). This service is open to consumers and small and medium-sized businesses, ‘micro-enterprises’, charities and trusts. The service will be an attractive option for many businesses, as it is free and relatively quick (although it remains to be seen how the service keeps up with an increase in demand as a result of the pandemic). You will need to have complained to your insurer before bringing a complaint with the FOS.

Further details can be found here.

You also need to consider other aspects of data protection.

Be proportionate – only gather and use Covid-19 data where you need to.

Keep data to a minimum – you shouldn’t gather more data than you need. You need to know someone has Covid-19 but you don’t need to know all their symptoms. Data minimisation also applies to who gets access to the data. It’s unlikely that a spreadsheet, accessible to everyone updating them on the health status of all employees, would be appropriate. Data should be shared on a need to know basis. You need to balance the privacy of individuals against your duty of care to be responsible with regards to the data of your employees, visitors, customers and suppliers.

Keep it up to date – make sure you update data. People’s health status will change and if you keep a record of this, you need to  make sure it is accurate and up to date (although this doesn’t mean you should batter individuals with constant requests for updates on health status. Again, be proportionate).

Identify individuals only when you need to – although you will need to know who has Covid-19, that doesn’t mean you need to tell everyone in the organisation. As soon as you can, you should remove personal data from any information you gather. For example, you might want to update employees on the health status of their fellow employees but you probably don’t need to name individuals and even if you feel it is necessary, you should keep the information you provide to a minimum. Removing personal identifiers in a document is also a good data security technique.

Keep the Covid-19 health data secure – Covid-19 data will be special category data and deemed high risk. This means that if you have a breach of this data you will need to notify it to the ICO. A breach could happen by someone losing a print-out of the names of Covid-19 employees, customers or visitors. It could also happen if you set access rights to lists of Covid-19 sufferers open to more people than need to know the information. The risk of ICO enforcement action increases with the potential harm the disclosure could cause. Although the ICO has indicated that it will be understanding about the impact of Covid-19 on normal operations, this doesn’t mean that they will not prosecute you if the breach is sufficiently serious.

Destroy the data once you don’t need it – Finally, of course, make sure that you delete data at the end of your needs. This might last longer than the pandemic, for example if you have an insurance claim or ongoing litigation. If you do need to keep it, consider whether or not you can delete some of the data to minimise what you hold.

Yes.

An employer which is aware that a worker or agency worker is or ought to be self-isolating, should not knowingly allow that worker or agency worker to leave the place that they are self-isolating in (“the designated place”).  To do so without reasonable excuse would amount to an offence which could result in the employer being issued with a fixed penalty notice.

The value of the fixed penalty varies depending on if it is the first or subsequent fixed penalty notice to be issued:

A number of our clients and networks raised issues in the early stages of the Scheme around the requirement for personal guarantees to access finance under the Scheme. The Scheme has now been updated so that:

• For facilities under £250,000, personal guarantees cannot be taken to support lending under the Scheme.
• For facilities above £250,000, personal guarantees may still be required by a lender but the amount which can be recovered under these guarantees is capped at a maximum of 20% of the outstanding balance of the CBILS facility after taking into account any other recoveries from business assets.