Skip to content

How much data can I gather?

You also need to consider other aspects of data protection.

Be proportionate – only gather and use Covid-19 data where you need to.

Keep data to a minimum – you shouldn’t gather more data than you need. You need to know someone has Covid-19 but you don’t need to know all their symptoms. Data minimisation also applies to who gets access to the data. It’s unlikely that a spreadsheet, accessible to everyone updating them on the health status of all employees, would be appropriate. Data should be shared on a need to know basis. You need to balance the privacy of individuals against your duty of care to be responsible with regards to the data of your employees, visitors, customers and suppliers.

Keep it up to date – make sure you update data. People’s health status will change and if you keep a record of this, you need to  make sure it is accurate and up to date (although this doesn’t mean you should batter individuals with constant requests for updates on health status. Again, be proportionate).

Identify individuals only when you need to – although you will need to know who has Covid-19, that doesn’t mean you need to tell everyone in the organisation. As soon as you can, you should remove personal data from any information you gather. For example, you might want to update employees on the health status of their fellow employees but you probably don’t need to name individuals and even if you feel it is necessary, you should keep the information you provide to a minimum. Removing personal identifiers in a document is also a good data security technique.

Keep the Covid-19 health data secure – Covid-19 data will be special category data and deemed high risk. This means that if you have a breach of this data you will need to notify it to the ICO. A breach could happen by someone losing a print-out of the names of Covid-19 employees, customers or visitors. It could also happen if you set access rights to lists of Covid-19 sufferers open to more people than need to know the information. The risk of ICO enforcement action increases with the potential harm the disclosure could cause. Although the ICO has indicated that it will be understanding about the impact of Covid-19 on normal operations, this doesn’t mean that they will not prosecute you if the breach is sufficiently serious.

Destroy the data once you don’t need it – Finally, of course, make sure that you delete data at the end of your needs. This might last longer than the pandemic, for example if you have an insurance claim or ongoing litigation. If you do need to keep it, consider whether or not you can delete some of the data to minimise what you hold.

Related FAQs

How can RPs carry out Person Centred FRAs/PEEPs on tenants within directly managed supported living units where the RP is not providing support and any floating support provider doesn't see it as part of their responsibility?

There is no simple answer.

The NFCC guidance states:

“The person-centred fire risk assessment is intended only as a simple means for non-specialists who have suitable understanding of relevant fire risks to determine whether additional fire precautions might be needed. The person who carries out the person-centred fire risk assessment will depend on the circumstances of the housing and support provision. It can be carried out by those who regularly engage with the resident, with input from specialists where necessary. Assessments will normally be undertaken with residents themselves.

In sheltered housing with scheme managers, the scheme managers normally engage with residents on a routine basis, enabling residents who need a person-centred fire risk assessment to be identified. Many vulnerable residents will be in receipt of care, so enabling the care provider to identify residents in need of a person-centred fire risk assessment. Providers of regulated care are required to take into account risks to people from their wider environment, to take steps to help people ensure that they are dealt with by appropriate agencies, or to raise safeguarding alerts when this is appropriate. Where a ‘stay put’ strategy is adopted, there will be a need to identify residents who need assistance from the fire and rescue service to evacuate the building.

In supported housing, the number of residents in each property is usually quite small. This, and the nature of the care service normally provided, enables person-centred fire risk assessments to be carried out asa matter of course, when a resident first moves into the property.

Where additional fire precautions cannot be provided in the short term, the risk should be reduced as far as reasonably practicable and an adult at risk referral should be made to Adult Social Care.”

Ideally then the RP will need to engage with any care providers in order to conduct the PCRA and identify risk mitigation measures. If they are reluctant to do so, the RP should engage with the individual in any event in undertaking the assessment.

Even if the Government pays the wages of my employees who are not working, there is still not enough money to pay the bills. What should I do?

Click here for details of what sort of things directors should consider if the business is insolvent .

There may be additional sources of funding available in addition to the funding made available to help pay the wages.

If you still have concerns that your business might not be able to survive you should take advice as soon as possible from our team of experts or an insolvency or restructuring practitioner. That doesn’t necessarily mean that the business is bound to fail but your advisers will be able to explore with you different ways to navigate through the current difficulties faced by the business and any restructuring/refinancing opportunities based on their extensive experience of helping companies that are facing financial problems. If ultimately saving the business in its current form is not possible, your advisors can help you ensure that you do everything you can to protect your employees and creditors whilst also ensuring that you comply with your duties as a director.

Do I need Planning Permission to change the use of a warehouse or factory unit to a temporary mortuary?

Mortuaries are a sui generis use, unless ancillary to some other use of land, a hospital for example.

Sui generis uses are not within any Use Class. Consequently planning permission is required for the:

  • Change in the use to a sui generis use
  • Subsequently for the change in the use to an alternative use, whether that be another sui generis use or a use within a Use Class

Acknowledging the above, if the scale of the use is above de minimis, planning permission is likely to be required to change the use of a warehouse or factory unit into a temporary mortuary.

Should planning control be breached, a local planning authority must decide whether to take enforcement action or not. That enforcement is discretionary was recently reiterated in a Ministerial Statement issued on 13 March 2020 a link to which is below.

https://www.parliament.uk/business/publications/written-questions-answers-statements/written-statement/Commons/2020-03-13/HCWS159/

Depending on the form of the enforcement action, there could be a right of appeal.

What type of matters are the Courts still dealing with?

Civil Court listing priorities, last updated by HMCTS on 24 April 2020, categorise the Court’s work into the following:

Priority 1 – work that must be done: this includes any applications in cases listed for trial in the next 3 months, any applications where there is a substantial hearing listed in the next month, all multi-track hearings where parties agree that it is urgent (subject to triage).

Priority 2 – work that could be done: Infant and Protected Party approvals, Applications for interim payments in multi-track / personal injury / clinical negligence cases, Applications to set aside Judgment in default, Preliminary Assessment of costs.

The full guidance can be found at:

https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/881019/Civil_court_listing_priorities_24_April_2020.pdf

I'm a doctor. What should I do if I think I may be infected with coronavirus?

The GMC recognises the challenges the doctors may face as the situation continues to develop. This includes concerns about the risks to the health of the doctors when treating patients with coronavirus. Doctors should follow the current public health advice including self-isolating if they know or suspect that they are infected or are at a higher risk of infection.

 

Finally, all necessary steps should be taken to ensure that doctors have access to protective equipment and minimise the risk of transmission when treating patients. It is imperative that a record is kept of all decisions made and how any safety or health concerns have been handled.

 

The GMC continues to work with NHS England and UK’s Chief Medical Officers to provide updates and advice to all doctors as the situation develops. Click here for more information.