How do I ensure my use of video conferencing calls complies with GDPR?
With the loss of face-to-face meetings in the current situation, video conferencing has taken centre stage. But how do you do that in a compliant way? Here are some of the main high-level data protection issues to consider when selecting and implementing a new third party provider’s video conferencing system.
- Make sure you do your due diligence on the security measures offered by the provider. Clearly you can’t visit them, so look at the information offered publicly by the provider and read good quality, reliable, third party sources and ask the provider questions directly. Also ask any other organisations you know that use the provider. Document all this.
- If personal information is being sent outside of the UK/European Economic Area, make sure that transfer complies with GDPR. If it’s a US provider, is it registered in the EU-US Privacy Shield list or does it offer a model clause contract (you’re likely to need the 2010 version)? Or is the service provided from a country whose data protection laws offer equivalent protection to those in Europe? Look at the support service as well as the hosting. Document this.
- Make sure you put a compliant processor agreement in place. The provider should offer one as part of the contract terms. Check it meets GDPR requirements.
- You’re likely to need to update your privacy notice, particularly if you’re going to record calls. Provide participants with a short message and link to the privacy notice in the meeting invite and on any registration page.
- Create or update other GDPR-mandated documentation – for example, depending on your use, you may need a legitimate interests assessment and to update your record of processing.
- Finally, configure and use the system in a secure and compliant way. Look at the settings/options carefully and think through the security and compliance implications of each. That could include deciding who in the meeting can share their screen; whether or not you use passwords for participants; whether or not to record, and if you’re going to record, where to store the recording. Document your decisions and the reasons for them.
The ICO has said it understands that resources, whether they are finances or people, might be diverted away from usual compliance work during the pandemic. However the last thing you need at the moment is to create a bigger problem than the one you are trying to solve. So do the best you can, ask for help from one of our specialists if you need it, and keep the whole thing under review.
On 16 April 2020, Ian Hulme, the ICO’s Director of Assurance, posted a blog for business owners, employers and managers about how to safely roll out the latest video conferencing technology.
On 21 April 2020, the NCSC published security guidance for organisations on choosing, configuring and deploying video conferencing services.
Related FAQs
The Government will provide the lender with a partial guarantee (80%) against the outstanding facility balance, subject to an overall cap per lender. Note, the Government guarantee is to the lender only, the borrower will always remain 100% liable for the debt.
We understand that will make an initial claim for recovery against the borrower and will, once its normal recovery procedures have been completed, claim against the Government guarantee.
The Town and Country Planning (Use Classes) (Amendment) (England Regulations) 2020 were laid before Parliament and come into force on 1 September 2020. They apply in England only.
The changes include the revocation of the following Use Classes;
- A1 – shops
- A2 – financial and professional services
- A3 – restaurants and cafes
- A4 – drinking establishments
- A5 – hot food takeaways
- B1 – business. Also revoked are the sub parts of B1;
- B1(a) – offices
- B1(b) – research and development of products and processes
- B1(c ) – industrial process
- D1 – non residential institutions
- D2 – assembly and leisure
The changes include the amendment of the following Use Class;
- B2 (industry)
The changes include the introduction of the following Use Classes;
- E – commercial, business and service
- F.1 – learning and non-residential institutions
- F.2 – Local community
There are no changes to the following Use Classes;
- C1 – hotels, boarding and guest houses
- C2 – residential institutions
- C3 – dwellinghouses
- C4 – small HMO
From 1 September 2020;
- Small retail shops (not more than 280 sq metres net sales area) selling essential goods including food and at least 1 kilometre from another shop will cease being an A1 use and will become a F.2 (local community) use;
- Other A1 shops will become an E (commercial, business and service) use;
- A2 uses will become an E (commercial, business and service) use;
- A3 uses will become an E (commercial, business and service) use;
- A4 uses will not be in a Use Class, they will be sui generis, ie not in any use class;
- A5 uses will not be in a Use Class, they will be sui generis, ie not in any use class;
- B1 uses (included B1(a), B1 (b) and B1 (c) will become an E (commercial, business and service) use;
- B2 uses will either be B2 uses or will be Class E uses.
- Clinics, health centres, creches, day nurseries and day centres (previously D1 uses) will become an E (commercial, business and service) use;
- Schools, non residential education and training centres, museums, public libraries, public halls, exhibition halls, places of worship, law courts (previously D1 uses) will become an F.1 ( learning and non-residential institutions) use;
- Cinemas, concert halls, live music performance venues, bingo halls and dance halls (previously D2 uses) and will be sui generis, ie not in any use class;
- Gyms, indoor sport, recreation or fitness not involving motorised vehicles or firearms principally to visiting members of the public (previously D2 uses) will become an E (commercial, business and service) use;
- Hall or meeting place for the principal use of the local community (previously D2 uses) will become an F.2 (local community) use;
- Indoor or outdoor swimming baths, skating rinks, outdoor sports or recreation grounds (not involving motorised vehicles or firearms) (previously D2 uses) will become an F.2 (local community) use.
Changes of use within a Use Class do not constitute development. That being the case, provided the Order is applicable, its operation not having been restricted by planning condition, Agreement or Article 4 (1) Direction for example, planning permission would not be required, development as defined not happening. If legally binding confirmation is required that planning permission is not required this can only be obtained by way of a successful application for a Certificate of Lawfulness. In the absence of such, there is some risk.
It remains the case that planning permission may be required for operational works to buildings. It also remains the case that other consents and permissions may be necessary for example licenses. Furthermore amendments to leases may be required if the property is rented.
The Regulations additionally include transitional arrangements because of permitted development rights for changes of use in the Town and Country Planning (General Permitted Development) (England) Order amongst others. To respond to this Regulations introduce a ‘material period’ which is defined as meaning the period beginning 1 September 2020 and ending 31 July 2021. It is expected during the material period the Orders giving permitted development rights for changes for use which do constitute development will be amended / updated to reflect the new use classes.
Click here to view the Regulations.
The above is based on our understanding of the new Regulations at the time of issue and in advance of planning practice guidance being issued.
In appropriate cases, disciplinary action and then dismissal may be fair if an employee refuses to wear a face covering in the workplace. For example, if this is in breach of the government guidance or if employer has issued a reasonable management instruction to this effect due to an identified health and safety risk.
It is important that employers use a fair and reasonable procedure when deciding whether to discipline and/or dismiss an employee and that its actions does not unlawfully discriminate against employees who have legitimate reasons for not wearing masks, such as those individuals who have health conditions like asthma.
If an employee is required under government guidance to wear a face mask during the course of their employment and there is no applicable exemption, any fine issued would be payable by the employee, not the employer.
Your lawyers can take your instructions by telephone, Skype, Zoom or a similar tool. However, the formal requirement to make a valid Will requires two witnesses to be present with you when you sign the Will and they must then add their signatures. The witnesses or their spouse cannot be beneficiaries or they will forfeit their inheritance.
The main challenge is how to have your witnesses with you at a time when we are being advised to socially distance. One option would be for the witnesses to stand outside your window or at a safe distance from you where they have a clear line of sight. The witnesses can watch you sign and then you could post your Will through your letterbox or leave it on a surface for them to pick up so that they can then sign their names too. If the witnesses live together then they do not need to keep two meters apart from each other.
The Wills Act 1837 requires that your witnesses must be physically present when you sign your Will and therefore it is not possible to do this by Skype, Zoom or similar video conferencing means. You may however want to video record the process by which you and your witnesses signed your Will so that you have a record of what was done, particularly if you are worried that someone might challenge the validity of your Will in due course. You can of course re-execute your Will once social distancing has been relaxed if you are particularly concerned.
Be aware that the virus can remain on documents for more than 24 hours so it would be sensible for everyone to wear disposable gloves and in any event to wash hands thoroughly after handling the Will.
Emergency legislation may be passed regarding the requirement to make a valid Will but you must follow the current rules unless or until new legislation is passed.