How do I remain compliant and cover any risk?

Employers will be collecting and sharing health information. Health information is sensitive and higher data protection standards apply. Here are a few key pointers.

• Update privacy notices to cover the new collection and sharing of employees’ information and provide these to the workforce. Be transparent and fair.
• Identify the legal basis and condition for use of this information and put any required paperwork in place. The ICO guidance will help. For some conditions such as the employment condition, an Appropriate Policy Document (APD) will be required. The ICO has an APD template.
• Only use the information for the purpose of managing the workforce during the pandemic.
• Only collect or share information if it’s necessary – if it’s a targeted and proportionate way of achieving your purpose.
• Make sure any health information collected and shared is accurate – there may be serious consequences if it’s not.
• Work out how long the information must be kept for. Keep a record of that period and act on it at the appropriate time.
• Security is very important – there may be malicious actors trying to trick employers and employees. Make sure employees know how to identify a genuine NHS Test and Trace contact. Keep the information secure. Use the ICO’s data sharing checklists** and keep a record of the disclosures made and why. Control external disclosures – only certain authorised members of staff should make them.
• Make sure individuals can still exercise their data protection rights – that’s also very important. Keep data protection records up-to-date and ensure any exports of personal information outside the UK are compliant.
• Before introducing employer-led testing like taking temperatures, thermal imaging or other potentially intrusive tests, work out if a data protection impact assessment (DPIA) is required. It will be if the intended processing is ‘high risk’. If it is, then carry out a full DPIA. It will help address the issues systematically and mitigate risks.
• All this demonstrates ‘accountability’ – it shows affected individuals and the ICO that the employer is complying with data protection requirements.

If you need further help, please visit the ICO’s data protection and coronavirus information hub or ask our data protection team.

** Please note that this link is to the ICO’s existing checklists and data sharing code of practice. We will update the link to the ICO’s new checklists after they are published.

On 2 April 2020, the Government issued guidance relating to Private Finance Initiatives and PF2 Projects. The guidance, which is to be enforced with immediate effect (currently due to stay in place until 30 June 2020), is one of several guidance notes issued to date.

A link to the guidance is set out below:

https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/877804/2020_04_01_PFI_and_COVID19_final.docx.pdf

Key messages to contracting authorities

• PFI contractors should very much consider themselves as being part of the public sector response to the current pandemic
• Covid-19 is not regarded as, and is not to be classified as a force majeure event
• PFI contractors must ensure that contingency plans are up to date and have been reviewed and discussed with contracting authorities to enable the continuity of full services to respond to the pandemic and maintain vital public services
• Contracting authorities should work closely with PFI contractors to use all available options to maintain public services during the emergency period
• Local arrangements should be made where PFI contractors can’t deliver the agreed requirements and performance standards
• “Best efforts” should be made by all parties for the continuation of service provision

1. Keep in touch. If contact is poor, workers can feel disconnected, isolated or abandoned. This can adversely affect stress levels and mental health – especially in the current crisis when everyone is feeling more anxious.
2. Think about the use of laptops/devices (DSE) at home. Provide a basic form of risk assessment for self-completion.
3. Remind workers of simple steps to reduce the risks from display screen work:
   • take regular breaks (at least 5 minutes every hour) or change activity
   • avoid awkward, static postures by regularly changing position
   • get up and move or do stretching exercises
   • avoid eye fatigue by changing focus or blinking from time to time

You must exercise reasonable care in assessing status and making a status determination, considering what the position would be if the contractor was engaged directly by the end user client instead of via a PSC.

Status is usually determined by looking a number of factors and how they apply to the contractor’s working arrangements. This is a difficult exercise that is usually carried out by employment and tax lawyers and it is full of grey areas. We have a toolkit that can help you navigate this process which Paul will tell you more about at the end of the session.

The key factors used to determine status  are:

• Control:
  • How much control does the end user client have over the contractor in terms of working arrangements (hours, place of work) and how the work is carried out? Or is the individual contractor able to determine how and when they work and without direct supervision of the end user client?
• Personal service:
  • Is the contractor required to perform the services personally without the right to send a substitute? If there is a right to appoint a substitute is this subject to end user client approval?
• Mutuality of obligation:
  • Is the end user client obliged to provide the contractor work with a mutual obligation on the contractor to accept that work?

• Certain workers will become “furloughed workers”.
• Furloughed workers cannot carry out any work for their employer while designated as furloughed, or a linked or associated organisation but they can do voluntary work as long as they are not providing services for or generating revenue for the employer or a linked or associated organisation.
• A furloughed worker can be furloughed part time and work the rest of the time.
• The furlough period begins when the employee stops work, not when agreement is reached.
• If furloughed employees are expected to do online training while furloughed they must receive the National Living Wage/National Minimum Wage for the time spent training.
• Workers must be told of and agree to this change in writing. This written agreement must be kept for five years as part of the scheme. The guidance has confirmed that collective agreement reached between an employer and a trade union on furloughing staff is acceptable for the purposes of making a claim under the scheme.
• However it should also be noted that this is a change in status and pay (if pay is not being topped up) and therefore subject to the usual employment law rules on changing terms and conditions.
• Changes to the contract must be made by agreement with the worker and the government guidance is clear that to be eligible for the subsidy employers must document their communication with the employee on being furloughed.
• You must confirm in writing that an employee has been furloughed, but that the employee does not need to provide a written response. Please note that this is for the purposes of making a claim under the scheme. Any reduction in pay must be agreed in writing under normal employment law principles and failure to do so may result in Employment Tribunal claims. You should not rely on a term in the employment contract to effect this change. We can advise you on how to document this properly.
• Employers must also keep a record of the agreement for at least 5 years.
• If employers have collective bargaining arrangements in place, they must agree this change with the union in the usual way.
• Collective consultation obligations may be triggered if there are 20 or more employees that are proposed to be dismissed and re-engaged in order to effect the change to terms to be furloughed. You should take advice if you think this may apply.