How is an establishment defined?

The golden thread requirements will be retrospective, so will apply to existing buildings as well as new build. This is part of the reason for the Building Safety Regulator’s ‘get to know your building’ guidance referred to in the talk, with the link in the Powerpoint presentation. While the details of the golden thread requirement are still to be confirmed, now is a good time to start to gather as much information as can be obtained about existing buildings as possible in preparation. The Government guidance anticipates that the Principal Accountable Person will be responsible for developing and coordinating the golden thread for existing buildings.

The Government has produced and published three new Procurement Policy Notes as a direct result of the ever changing Covid-19 environment.

PPN 01/20: Responding to COVID-19

The purpose of PPN 01/20 is to ensure that contracting authorities are able to procure goods, services and works with extreme urgency, to allow them to respond to the pandemic efficiently.

This PPN provides guidance for the following circumstances:

• Direct award due to extreme urgency (regulations 32(2)(c)) (click here to read our article regarding regulation 32)
• Direct award due to an absence of competition or protection of exclusive rights
• Call off from an existing framework agreement or dynamic purchasing system
• Call for competition using a standard procedure with accelerated timescales
• Extending or modifying a contract during its term

PPN 02/20: Supplier relief due to COVID-19

PPN 02/20 focuses predominantly on the supplier to assist in keeping supply chains open and ensuring that suppliers are kept financially sound during these unpredictable times.

This PPN provides guidance for the following circumstances:

• Urgent reviews of contract portfolios and to update suppliers if they believe they are at risk
• Put in place appropriate payment measure to support supplier cash flow
• Where contract payments are based on ‘payment by results’ make payments based on previous invoices
• Ask suppliers to act on a ‘open book’ basis and make cost data available to the contracting authority during this period
• Ensure invoices submitted by suppliers are paid immediately on receipt

PPN 03/20: Use of Procurement Cards

The third guidance note PPN 03/20 relates to the use of procurement cards to increase efficiency and accelerate payment to suppliers.

This PPN provides the following advice and urges organisations to arrange with their procurement card provider to:

• Increase a single transaction limit to £20,000 for key card holders
• Raise monthly limits on spending with procurement cards to £100,000 for key card holders
• Spend on procurement cards each month in excess of £100,000 should be permissible to meet business needs

Although the above advice has been provided, should these limits not be necessary, organisations should seek an appropriate transaction limit or monthly limit.

The PPN also advises that by 30 April 2020, in scope organisations should:

• Ensure that a number of appropriate staff have the authority to use these cards
• Open all relevant categories of spend to enable these cards to be used more widely

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Employers will be collecting and sharing health information. Health information is sensitive and higher data protection standards apply. Here are a few key pointers.

• Update privacy notices to cover the new collection and sharing of employees’ information and provide these to the workforce. Be transparent and fair.
• Identify the legal basis and condition for use of this information and put any required paperwork in place. The ICO guidance will help. For some conditions such as the employment condition, an Appropriate Policy Document (APD) will be required. The ICO has an APD template.
• Only use the information for the purpose of managing the workforce during the pandemic.
• Only collect or share information if it’s necessary – if it’s a targeted and proportionate way of achieving your purpose.
• Make sure any health information collected and shared is accurate – there may be serious consequences if it’s not.
• Work out how long the information must be kept for. Keep a record of that period and act on it at the appropriate time.
• Security is very important – there may be malicious actors trying to trick employers and employees. Make sure employees know how to identify a genuine NHS Test and Trace contact. Keep the information secure. Use the ICO’s data sharing checklists** and keep a record of the disclosures made and why. Control external disclosures – only certain authorised members of staff should make them.
• Make sure individuals can still exercise their data protection rights – that’s also very important. Keep data protection records up-to-date and ensure any exports of personal information outside the UK are compliant.
• Before introducing employer-led testing like taking temperatures, thermal imaging or other potentially intrusive tests, work out if a data protection impact assessment (DPIA) is required. It will be if the intended processing is ‘high risk’. If it is, then carry out a full DPIA. It will help address the issues systematically and mitigate risks.
• All this demonstrates ‘accountability’ – it shows affected individuals and the ICO that the employer is complying with data protection requirements.

If you need further help, please visit the ICO’s data protection and coronavirus information hub or ask our data protection team.

** Please note that this link is to the ICO’s existing checklists and data sharing code of practice. We will update the link to the ICO’s new checklists after they are published.

The new rules for wearing face masks/face coverings in the workplace introduced on 23 September 2020 are as follows:

• Staff in retail, including shops, supermarkets and shopping centres, will now have to wear a face covering
• Staff in hospitality will now have to wear a face covering
• Guidance stating that face coverings and visors should be worn in close contact services, such as hairdressers and beauticians, will now become law
• Staff working on public transport and taxi drivers will continue to be advised to wear face coverings

You can take off your mask if:

• You who need to eat, drink, or take medication
• A police officer or other official asks you to