How do I ensure my use of video conferencing calls complies with GDPR?
With the loss of face-to-face meetings in the current situation, video conferencing has taken centre stage. But how do you do that in a compliant way? Here are some of the main high-level data protection issues to consider when selecting and implementing a new third party provider’s video conferencing system.
- Make sure you do your due diligence on the security measures offered by the provider. Clearly you can’t visit them, so look at the information offered publicly by the provider and read good quality, reliable, third party sources and ask the provider questions directly. Also ask any other organisations you know that use the provider. Document all this.
- If personal information is being sent outside of the UK/European Economic Area, make sure that transfer complies with GDPR. If it’s a US provider, is it registered in the EU-US Privacy Shield list or does it offer a model clause contract (you’re likely to need the 2010 version)? Or is the service provided from a country whose data protection laws offer equivalent protection to those in Europe? Look at the support service as well as the hosting. Document this.
- Make sure you put a compliant processor agreement in place. The provider should offer one as part of the contract terms. Check it meets GDPR requirements.
- You’re likely to need to update your privacy notice, particularly if you’re going to record calls. Provide participants with a short message and link to the privacy notice in the meeting invite and on any registration page.
- Create or update other GDPR-mandated documentation – for example, depending on your use, you may need a legitimate interests assessment and to update your record of processing.
- Finally, configure and use the system in a secure and compliant way. Look at the settings/options carefully and think through the security and compliance implications of each. That could include deciding who in the meeting can share their screen; whether or not you use passwords for participants; whether or not to record, and if you’re going to record, where to store the recording. Document your decisions and the reasons for them.
The ICO has said it understands that resources, whether they are finances or people, might be diverted away from usual compliance work during the pandemic. However the last thing you need at the moment is to create a bigger problem than the one you are trying to solve. So do the best you can, ask for help from one of our specialists if you need it, and keep the whole thing under review.
On 16 April 2020, Ian Hulme, the ICO’s Director of Assurance, posted a blog for business owners, employers and managers about how to safely roll out the latest video conferencing technology.
On 21 April 2020, the NCSC published security guidance for organisations on choosing, configuring and deploying video conferencing services.
Related FAQs
- Start critical care treatment with a clear plan of how the treatment will address the diagnosis and lead to agreed outcomes.
- Review critical care treatment regularly and when the patient’s clinical condition changes.
- Stop critical care treatment when it is no longer considered able to achieve the desired outcomes. Record the decision and the discussion with family, carers and the patient (if possible).
All of the measures announced above are aimed at all employers in the UK and are not sector specific. However, over and above these measures the Chancellor also announced a number of financial measures that he hopes will save jobs in the hospitality industry such as the reduction of VAT on food and drink and the “eat out to help out” scheme which has already taken place. The Job Support Scheme is designed to support businesses who face lower demand due to the pandemic, and so is designed to have an impact on those sectors most badly hit.
A new Permitted Development Right has been introduced by The Town and Country Planning (Permitted Development and Miscellaneous Amendments) (England) (Coronovirus) Regulations 2020 providing for the construction of new dwellinghouses on detached blocks of flats.
The new Right comes into force on 1 August 2020 and from this date development consisting of works for the construction of up to two additional storeys of new dwellinghouses immediately above the existing topmost residential storey which is a purpose-built, detached block of flats is permitted development. The Right additionally covers specified associated works, the construction of fire escapes and ancillary structures, bin stores for example.
The Right is subject to detailed criteria being met and to a prior approval process to the Local Planning Authority who can consider the acceptability of the proposed development in a range of respects. A link to the Regulations is here.
The Regulations additionally include a number of further amendments including additional rights for the holding of markets and for additional temporary uses of land for a time limited period. They additionally include amendments to existing permitted development rights for the change of use of buildings to dwellinghouses through a requirement that there be adequate natural light in all habitable rooms.
The government has announced a number of measures to try to protect businesses during the current period of uncertainty. However there is no outright ban on creditors being able to take legal action to recover money they are owed, though there are temporary restrictions on some forms of legal action, like winding up petitions.
However, it is important to note that these measures only relate to winding up proceedings. Creditors will still be free to commence county court claims.
The new Corporate Insolvency and Governance Act 2020 brings in a new “moratorium” procedure. Businesses in financial difficulty that are viable and can be rescued will now be able to work with an insolvency practitioner to obtain at least 20 business days’ breathing space from creditors to allow the business to formulate a plan to deal with its financial problems.
For more information on the Corporate Insolvency and Governance Act, click here
As part of the raft of measures put forward by the government over recent months, there are also restrictions on landlords taking action to evict commercial tenants who miss rent payments. Various payment holidays and forbearance have been put in place in respect of certain tax liabilities and some business rates.
If your business is going to go into an insolvency process like administration or a company voluntary arrangement, there is the ability to obtain a freeze on creditors taking action whilst those procedures are put in place. However, these sorts of moratoriums will not be available to everyone and in any event not unless an insolvency process is being instigated.
Regardless of whether a business has formal protection from creditors or not, engagement with creditors and trying to reach agreement with them to deal with the debt is therefore vital. Much of the protection measures that the Government has introduced like curbing the ability of landlords to evict a commercial tenant, do not wipe out the debt. They simply prevent action being taken or a payment becoming due for a short time. All businesses should use that time to consider how those debts can be dealt with and engage with the relevant stakeholders sooner rather than later.
All employers in the UK are eligible to participate in the scheme. The purpose of the scheme is to allow employers to claim back employment costs if they have furloughed employees arising from the coronavirus crisis. Importantly this means the scheme is not limited to cases where the employee would otherwise have been made redundant.
Key points:
- Between 1 November 2020 – 30 June 2021, the government will reimburse employers for 80% of wage costs, up to a cap of £2,500 per month, with employers expected to contribute 10% of that 80% in July 2021 and 20% of that 80% in August and September 2021. Employers will still need to pay employer NICs and employer pension contributions (these cannot be claimed for).
- The scheme now also allows employees to return to work part time being on furlough for the remainder. See flexible furlough above for more information.
- The employer can agree to pay the employee more than it will be reimbursed but it cannot reclaim the additional amount or any other costs associated with the additional amount.
- The workers covered by the scheme are those who have been “furloughed” which is a leave of absence.
- Workers must be told about and agree to this change of status (see below).
- Employers have to continue to pay the furloughed workers and the Government will reimburse the employer.
- HMRC is administering the scheme and it has been extended until the end of September 2021
- Those who left employment and are re-employed and subsequently furloughed by agreement are eligible (please see the FAQ regarding redundancy and furlough above).
- Payments may be withheld if claims are based on inaccurate or dishonest information, or are found to be fraudulent. HMRC has put in place an online hotline for employees and the general public to report suspected fraudulent claims.
- The Government has made alternative help available for employers to continue to pay employees while the scheme is set up.