How do I ensure my use of video conferencing calls complies with GDPR?
With the loss of face-to-face meetings in the current situation, video conferencing has taken centre stage. But how do you do that in a compliant way? Here are some of the main high-level data protection issues to consider when selecting and implementing a new third party provider’s video conferencing system.
- Make sure you do your due diligence on the security measures offered by the provider. Clearly you can’t visit them, so look at the information offered publicly by the provider and read good quality, reliable, third party sources and ask the provider questions directly. Also ask any other organisations you know that use the provider. Document all this.
- If personal information is being sent outside of the UK/European Economic Area, make sure that transfer complies with GDPR. If it’s a US provider, is it registered in the EU-US Privacy Shield list or does it offer a model clause contract (you’re likely to need the 2010 version)? Or is the service provided from a country whose data protection laws offer equivalent protection to those in Europe? Look at the support service as well as the hosting. Document this.
- Make sure you put a compliant processor agreement in place. The provider should offer one as part of the contract terms. Check it meets GDPR requirements.
- You’re likely to need to update your privacy notice, particularly if you’re going to record calls. Provide participants with a short message and link to the privacy notice in the meeting invite and on any registration page.
- Create or update other GDPR-mandated documentation – for example, depending on your use, you may need a legitimate interests assessment and to update your record of processing.
- Finally, configure and use the system in a secure and compliant way. Look at the settings/options carefully and think through the security and compliance implications of each. That could include deciding who in the meeting can share their screen; whether or not you use passwords for participants; whether or not to record, and if you’re going to record, where to store the recording. Document your decisions and the reasons for them.
The ICO has said it understands that resources, whether they are finances or people, might be diverted away from usual compliance work during the pandemic. However the last thing you need at the moment is to create a bigger problem than the one you are trying to solve. So do the best you can, ask for help from one of our specialists if you need it, and keep the whole thing under review.
On 16 April 2020, Ian Hulme, the ICO’s Director of Assurance, posted a blog for business owners, employers and managers about how to safely roll out the latest video conferencing technology.
On 21 April 2020, the NCSC published security guidance for organisations on choosing, configuring and deploying video conferencing services.
Related FAQs
Almost two thirds of hearings conducted in the Civil Court will occur in person over the next few months as the Civil Court sees an influx in cases.
The Courts
In the Business & Property Courts, cases have been dealt with consistently since the start of the pandemic, except for trials that run for longer than 10 days in the Commercial & Admiralty Court. The Queen’s Bench Division and Administrative Court are also running as normal. If your case is listed for one of these courts, you do not need to be concerned that your case may take longer than anticipated, with conclusions still being reach at the normal rate.
Hearings
Since the start of the pandemic, most hearings have been conducted online through various platforms such as Skype for Business and Cloud Video Platform. The courts are of the view that remote hearings tend to take longer than those that are held in person. As a result, if your case is due to be held in person, the case may be heard in less time. HM Courts and Tribunals Service stated that:
“Wherever possible we will look to facilitate face-to-face hearings, but our expectation is that remote hearings will continue to play an important role for the foreseeable future, given that social distancing will continue to limit courtroom capacity compared to pre-Covid levels.”
More courtrooms have become available since the start of the pandemic, resulting in more facilities for cases to be heard in person, which will have the aim of helping to rid of the backlog of cases, along with remote hearings being conducted too, which is a welcome step forward.
Approximately 300 additional support staff will be employed for remote hearings before the end of 2020, enabling better service with remote hearings. The Government has decided that some civil judges will have the option to extend operating hours for cases to be held in the evenings and on weekends too, which may be most suitable for small and fast-track claims, resulting in a potentially faster outcome. The efficiency of all the new measures are being monitored and changes are being implemented, such as increasing the capacity of the Small Claims Mediation Service.
Small Claims Mediation Service
With claims of a lower value, a high proportion of cases successfully settle outside of court, therefore, if you have a small claim, the mediation service may be suitable for your case. Mediation involves a trained impartial third party, with the parties to the case discuss the dispute with the assistance of the third party, aiming to reach a settlement. Now with the increased capacity, it may make the mediation service more accessible, meaning that an agreement can be reached more swiftly rather than waiting for the matter proceed to a hearing.
The courts have stated that:
“We aim to increase capacity to accommodate 90% of parties who want mediation, rather than the current 40%. We are recruiting additional mediators and restructuring ways of working to achieve this.”
This is a positive shift for those with small and fast-track claims where legal costs ought to be kept to a minimum. Settling by mediation removes the need for trial costs, amongst other costs, and has additional benefits such as the matter being dealt with more amicably.
Employees with visas should be treated consistently with the wider workforce. When their furlough leave ends, they should return to work and their pay should be reinstated. If you agree a pay cut or reduction in working hours, you need to ensure that sponsored workers are still earning above the minimum salary for their role and working in excess of the minimum number of hours (see above).
The flexible furlough scheme is now in place and can be used for employees who have previously been furloughed for a consecutive period of at least three weeks. The flexible furlough scheme remains in place until 31 October 2020.
As the project progresses, it is important to continually monitor the contractor’s performance. Any one or more of the items below can be early warning signs that the contractor is in financial difficulty, and that further actions may be necessary:
- Decrease in labour or contractor’s personnel on site, and/or rapid turnover of contractor’s personnel
- Slowdown in progress on site
- Plant, equipment or materials suddenly disappearing from site for no apparent reason – unpaid subcontractors may unilaterally decide to remove items from site regardless of their contractual rights to do so
- An increasing number of defects and reduction in the quality of the contractor’s work
- The contractor seeking changes in the payment arrangements, and in particular early payments
- The contractor making spurious claims or contra charges
- The contractor seeking assignment of its benefit of the building contract
- Late filing of accounts by the contractor at Companies House
- Unsatisfied court judgements against the contractor
- Subcontractors and suppliers not being paid or being paid late
- Rumours in the press, in the industry, on site or elsewhere regarding the solvency of the contractor
- Unusual visits to site, for example from the contractor’s senior management or other personnel who had not previously been present or are not expected to be present
- Increasingly aggressive behaviour by the contractor
- The contractor’s parent company or another company within the contractor’s group displaying any of the above signs
As above, people must not leave their home unless they have a ‘reasonable excuse’ and travelling should be limited to their local area. Employees may leave their home and local area to travel for work if they cannot reasonably work from home. You should attempt to reduce the number of journeys they make.
Interestingly, there is currently no ‘single’ technology to be used by the judiciary within the protocol. The court and parties must choose from a selection of possible IT platforms or audio/telephone hearing (further details available in the guidance e.g. Skype for Business, Microsoft Teams, Zoom etc.) The particular platform must be agreed at the outset of each case and then specified in the case management order. The guidance issued also sets out the basic principles which apply when conducting remote hearings.