How should an employer handle personal information in relation to NHS Test and Trace?
Employers will be collecting and sharing health information. Health information is sensitive and higher data protection standards apply. Here are a few key pointers.
- Update privacy notices to cover the new collection and sharing of employees’ information and provide these to the workforce. Be transparent and fair.
- Identify the legal basis and condition for use of this information and put any required paperwork in place. The ICO guidance will help. For some conditions such as the employment condition, an Appropriate Policy Document (APD) will be required. The ICO has an APD template.
- Only use the information for the purpose of managing the workforce during the pandemic.
- Only collect or share information if it’s necessary – if it’s a targeted and proportionate way of achieving your purpose.
- Make sure any health information collected and shared is accurate – there may be serious consequences if it’s not.
- Work out how long the information must be kept for. Keep a record of that period and act on it at the appropriate time.
- Security is very important – there may be malicious actors trying to trick employers and employees. Make sure employees know how to identify a genuine NHS Test and Trace contact. Keep the information secure. Use the ICO’s data sharing checklists** and keep a record of the disclosures made and why. Control external disclosures – only certain authorised members of staff should make them.
- Make sure individuals can still exercise their data protection rights – that’s also very important. Keep data protection records up-to-date and ensure any exports of personal information outside the UK are compliant.
- Before introducing employer-led testing like taking temperatures, thermal imaging or other potentially intrusive tests, work out if a data protection impact assessment (DPIA) is required. It will be if the intended processing is ‘high risk’. If it is, then carry out a full DPIA. It will help address the issues systematically and mitigate risks.
- All this demonstrates ‘accountability’ – it shows affected individuals and the ICO that the employer is complying with data protection requirements.
If you need further help, please visit the ICO’s data protection and coronavirus information hub or ask our data protection team.
** Please note that this link is to the ICO’s existing checklists and data sharing code of practice. We will update the link to the ICO’s new checklists after they are published.
Related FAQs
According to the guidelines laid down by the Treasury, many Start-up businesses will not be considered “viable” as they are at an early stage in the investment cycle (i.e. delivering negative returns but with strong growth prospects). This means they are unlikely to qualify for CBILS although for primarily UK based Start-ups it is still worth making enquiries as policies are rapidly evolving.
For early-stage businesses in their first two years of trading, the British Business Bank’s Start-Up Loans programme (loans £500 to £25,000 at 6% p.a. interest) may be more suitable. Visit www.startuploans.co.uk for more information.
For start-up businesses that are unable to access CBILS, the Government launched The Future Fund in May 2020 via the British Business Bank, which provides convertible loans to UK-based innovative companies ranging from £125,000 to £5 million, subject to at least equal match funding from private investors. This scheme is available until 30 September 2020 initially.
Your business is eligible if:
- it is UK-incorporated – if your business is part of a corporate group, only the parent company is eligible
- it has raised at least £250,000 in equity investment from third-party investors in the last five years
- none of its shares are traded on a regulated market, multilateral trading facility or other listing venue
- it was incorporated on or before 31 December 2019, and
- at least one of the following is true: (i) half or more employees are UK-based; and/or (ii) half or more revenues are from UK sales.
Further information is available on the Government website, www.gov.uk/guidance/future-fund
The Government is also offering additional support for small and medium size firms that are primarily focused on research and development. This targeted support is available through a continuity grant and loan scheme. The grant scheme is only available until 29 May 2020 while the loan scheme is open for applications until all the money is allocated or 31 December 2020 (whichever is earlier). This scheme is administered by Innovate UK, the national innovation agency, and this support will mostly only be available to existing Innovate UK customers.
Further information is available on the on the Government website, www.gov.uk/government/publications/access-coronovirus-business-innovation-support-package
Whilst many employees may now have the resources and equipment to work from home, an employee may struggle to effectively work from home for a number of reasons. For example, an employee may not have a suitable working environment where they can work without being disturbed or alternatively, working from home for prolonged periods of time may be having a detrimental impact on the employee’s mental well-being.
In circumstances such as these, employers must carry out a careful assessment. Unfortunately, there is not any specific guidance as to when an individual cannot ‘reasonably’ work from home – it is likely that each case will be fact specific.
In relation to employees who are struggling with their mental well-being, employers owe their employees a duty of care. It is crucial that procedures are in place which will enable an employer to recognise the signs of stress as early as possible. In the circumstances, it may be appropriate to allow an employee to attend their place of work if this would help alleviate work-related stress or to prevent mental health issues.
Specialist healthcare lawyers from Ward Hadaway ran a free webinar looking at the practical and legal considerations if required to treat healthcare workers from a BAME background or other vulnerable groups differently in the fight against the Covid-19 pandemic.
You will claim a pro rata’d amount of 80% of salary, based on the proportion of hours not worked out of the employee’s normal working hours (their “usual” hours).
There are 2 ways to calculate an employee’s usual hours, depending on whether they have fixed or variable hours/pay:
- For those with fixed hours/pay, you take the number of hours worked in the pay period before 19 March 2020.
- For those with variable hours/pay, you take the higher of:
- the average number of hours worked in the tax year 2019 to 2020 or
- the corresponding calendar period in the tax year 2019 to 2020.
If employees are paid per task or piece of work done, you should work out the usual hours for these employees in the same way as for other employees who work variable hours, if possible.
When you calculate the usual hours, you should include any hours of leave for which they were paid their full contracted rate (such as annual leave) and any hours worked as overtime (but only if the pay for those hours was not discretionary).
All organisations have underperformers. Capability is a potentially fair reason to dismiss and is separate to any redundancy procedures.
Generally, capability falls into either absences through illness or underperformance in the role. Those who are absent through sickness can be furloughed, but when furlough comes to an end they will need to go back onto sickness. If you are looking to tackle absence then you need to tackle long term and short term absence in a different way.
Long term absence: You need to establish whether the employee is able to return to work (with or without reasonable adjustments) in the medium term. This requires medical opinion and be careful of disability issues. Reasonable adjustments are likely to be important.
Short term absence: You will need to demonstrate that you have fair absence triggers in place and there is normally be a 3 stage procedure: warning and final warning followed by dismissal on notice. Each stage needs a fair procedure, with written information, a fair hearing and the opportunity to appeal. Be careful of disability issues.
As for underperformance: To tackle this, you will need to have clear SMART objectives in place and evidence of the employee failing to meet these. There would then normally be a 3 stage procedure: warning and final warning followed by dismissal on notice. Each stage needs a fair procedure, with written information, a fair hearing and the opportunity to appeal.