How do I ensure my use of video conferencing calls complies with GDPR?
With the loss of face-to-face meetings in the current situation, video conferencing has taken centre stage. But how do you do that in a compliant way? Here are some of the main high-level data protection issues to consider when selecting and implementing a new third party provider’s video conferencing system.
- Make sure you do your due diligence on the security measures offered by the provider. Clearly you can’t visit them, so look at the information offered publicly by the provider and read good quality, reliable, third party sources and ask the provider questions directly. Also ask any other organisations you know that use the provider. Document all this.
- If personal information is being sent outside of the UK/European Economic Area, make sure that transfer complies with GDPR. If it’s a US provider, is it registered in the EU-US Privacy Shield list or does it offer a model clause contract (you’re likely to need the 2010 version)? Or is the service provided from a country whose data protection laws offer equivalent protection to those in Europe? Look at the support service as well as the hosting. Document this.
- Make sure you put a compliant processor agreement in place. The provider should offer one as part of the contract terms. Check it meets GDPR requirements.
- You’re likely to need to update your privacy notice, particularly if you’re going to record calls. Provide participants with a short message and link to the privacy notice in the meeting invite and on any registration page.
- Create or update other GDPR-mandated documentation – for example, depending on your use, you may need a legitimate interests assessment and to update your record of processing.
- Finally, configure and use the system in a secure and compliant way. Look at the settings/options carefully and think through the security and compliance implications of each. That could include deciding who in the meeting can share their screen; whether or not you use passwords for participants; whether or not to record, and if you’re going to record, where to store the recording. Document your decisions and the reasons for them.
The ICO has said it understands that resources, whether they are finances or people, might be diverted away from usual compliance work during the pandemic. However the last thing you need at the moment is to create a bigger problem than the one you are trying to solve. So do the best you can, ask for help from one of our specialists if you need it, and keep the whole thing under review.
On 16 April 2020, Ian Hulme, the ICO’s Director of Assurance, posted a blog for business owners, employers and managers about how to safely roll out the latest video conferencing technology.
On 21 April 2020, the NCSC published security guidance for organisations on choosing, configuring and deploying video conferencing services.
Related FAQs
A new employer may claim under the scheme in respect of the employees of a previous business transferred after 10 June 2020 as long as:
- the TUPE or PAYE business succession rules apply to the change in ownership
- the employees being claimed have previously had a claim submitted for them by their prior employer in relation to a furlough period of at least 3 consecutive weeks taking place any time between 1 March 2020 and 30 June
In these circumstances, the maximum number of employees that the new employer can claim for will be the total of both:
- the maximum number of employees the new employer claimed for in any one claim ending on or before 30 June
- the number of employees that are being transferred to the new employer which have had a claim submitted for them in relation to a furlough period of at least 3 consecutive weeks taking place any time between 1 March 2020 and 30 June. This is subject the maximum cap the previous employer was subject to.
A new employer is also eligible to claim under scheme in respect of the employees associated with a transfer of a business after 10 June 2020 from the liquidator of a company in compulsory liquidation where:
- TUPE would have applied were it not for the company being in compulsory liquidation
- the employees being claimed for have been furloughed and a had a claim submitted for them by their prior employer in relation to a period of at least 3 consecutive weeks taking place any time between 1 March 2020 and 30 June
In these circumstances, the maximum number of employees that the new employer can claim for will be the total of both:
- the maximum number of employees the new employer claimed for in any one claim ending on or before 30 June and
- the number of employees that are being transferred to the new employer which have had a claim submitted for them by their prior employer in relation to a furlough period of at least 3 consecutive weeks taking place any time between 1 March 2020 and 30 June. This is subject to the maximum cap the previous employer was subject to.
One of the key legislative requirements of EMI is that the employee satisfies the working time requirement, which is that they work at least 25 hours per week in the company or, if less, 75% of the employee’s total working time. If the working time requirement ceases to be met, then there is a “disqualifying event”. That means that the tax benefits of EMI ceases. It may also mean that the option lapses, but that depends on the specific terms of the option.
An employee who has been furloughed is by definition no longer working 25 hours/week and therefore on the face of it, there is a disqualifying event. However, the Government has tabled an amendment to the Finance Bill currently going through Parliament providing in effect that time not worked because an employee has been furloughed counts as working time, both for determining whether the working time requirement is met initially and whether there is a disqualifying event. Provided this amendment is enacted, this should address the issue.
Once the collective process concludes, an employer can make the decision to proceed with the restructure. They will then have 1-on-1 meetings with employees about the impact of the restructure on them. This will include consideration of alternative employment. There is no need to consult further about the proposal, merely the effect of the restructure on the individual.
Despite remote hearings being the default position at present, formal permission will still be required by the court and a template order was circulated with the guidance. This template sets out the relevant directions and recitals to include in your order. An application to the COP for a remote hearing will not be required.
The Town and Country Planning (Use Classes) (Amendment) (England Regulations) 2020 were laid before Parliament and come into force on 1 September 2020. They apply in England only.
The changes include the revocation of the following Use Classes;
- A1 – shops
- A2 – financial and professional services
- A3 – restaurants and cafes
- A4 – drinking establishments
- A5 – hot food takeaways
- B1 – business. Also revoked are the sub parts of B1;
- B1(a) – offices
- B1(b) – research and development of products and processes
- B1(c ) – industrial process
- D1 – non residential institutions
- D2 – assembly and leisure
The changes include the amendment of the following Use Class;
- B2 (industry)
The changes include the introduction of the following Use Classes;
- E – commercial, business and service
- F.1 – learning and non-residential institutions
- F.2 – Local community
There are no changes to the following Use Classes;
- C1 – hotels, boarding and guest houses
- C2 – residential institutions
- C3 – dwellinghouses
- C4 – small HMO
From 1 September 2020;
- Small retail shops (not more than 280 sq metres net sales area) selling essential goods including food and at least 1 kilometre from another shop will cease being an A1 use and will become a F.2 (local community) use;
- Other A1 shops will become an E (commercial, business and service) use;
- A2 uses will become an E (commercial, business and service) use;
- A3 uses will become an E (commercial, business and service) use;
- A4 uses will not be in a Use Class, they will be sui generis, ie not in any use class;
- A5 uses will not be in a Use Class, they will be sui generis, ie not in any use class;
- B1 uses (included B1(a), B1 (b) and B1 (c) will become an E (commercial, business and service) use;
- B2 uses will either be B2 uses or will be Class E uses.
- Clinics, health centres, creches, day nurseries and day centres (previously D1 uses) will become an E (commercial, business and service) use;
- Schools, non residential education and training centres, museums, public libraries, public halls, exhibition halls, places of worship, law courts (previously D1 uses) will become an F.1 ( learning and non-residential institutions) use;
- Cinemas, concert halls, live music performance venues, bingo halls and dance halls (previously D2 uses) and will be sui generis, ie not in any use class;
- Gyms, indoor sport, recreation or fitness not involving motorised vehicles or firearms principally to visiting members of the public (previously D2 uses) will become an E (commercial, business and service) use;
- Hall or meeting place for the principal use of the local community (previously D2 uses) will become an F.2 (local community) use;
- Indoor or outdoor swimming baths, skating rinks, outdoor sports or recreation grounds (not involving motorised vehicles or firearms) (previously D2 uses) will become an F.2 (local community) use.
Changes of use within a Use Class do not constitute development. That being the case, provided the Order is applicable, its operation not having been restricted by planning condition, Agreement or Article 4 (1) Direction for example, planning permission would not be required, development as defined not happening. If legally binding confirmation is required that planning permission is not required this can only be obtained by way of a successful application for a Certificate of Lawfulness. In the absence of such, there is some risk.
It remains the case that planning permission may be required for operational works to buildings. It also remains the case that other consents and permissions may be necessary for example licenses. Furthermore amendments to leases may be required if the property is rented.
The Regulations additionally include transitional arrangements because of permitted development rights for changes of use in the Town and Country Planning (General Permitted Development) (England) Order amongst others. To respond to this Regulations introduce a ‘material period’ which is defined as meaning the period beginning 1 September 2020 and ending 31 July 2021. It is expected during the material period the Orders giving permitted development rights for changes for use which do constitute development will be amended / updated to reflect the new use classes.
Click here to view the Regulations.
The above is based on our understanding of the new Regulations at the time of issue and in advance of planning practice guidance being issued.