How should an employer handle personal information in relation to NHS Test and Trace?
Employers will be collecting and sharing health information. Health information is sensitive and higher data protection standards apply. Here are a few key pointers.
- Update privacy notices to cover the new collection and sharing of employees’ information and provide these to the workforce. Be transparent and fair.
- Identify the legal basis and condition for use of this information and put any required paperwork in place. The ICO guidance will help. For some conditions such as the employment condition, an Appropriate Policy Document (APD) will be required. The ICO has an APD template.
- Only use the information for the purpose of managing the workforce during the pandemic.
- Only collect or share information if it’s necessary – if it’s a targeted and proportionate way of achieving your purpose.
- Make sure any health information collected and shared is accurate – there may be serious consequences if it’s not.
- Work out how long the information must be kept for. Keep a record of that period and act on it at the appropriate time.
- Security is very important – there may be malicious actors trying to trick employers and employees. Make sure employees know how to identify a genuine NHS Test and Trace contact. Keep the information secure. Use the ICO’s data sharing checklists** and keep a record of the disclosures made and why. Control external disclosures – only certain authorised members of staff should make them.
- Make sure individuals can still exercise their data protection rights – that’s also very important. Keep data protection records up-to-date and ensure any exports of personal information outside the UK are compliant.
- Before introducing employer-led testing like taking temperatures, thermal imaging or other potentially intrusive tests, work out if a data protection impact assessment (DPIA) is required. It will be if the intended processing is ‘high risk’. If it is, then carry out a full DPIA. It will help address the issues systematically and mitigate risks.
- All this demonstrates ‘accountability’ – it shows affected individuals and the ICO that the employer is complying with data protection requirements.
If you need further help, please visit the ICO’s data protection and coronavirus information hub or ask our data protection team.
** Please note that this link is to the ICO’s existing checklists and data sharing code of practice. We will update the link to the ICO’s new checklists after they are published.
Related FAQs
On 25th June 2020, the Corporate Insolvency and Governance Act, among other things, introduced new restrictions on suppliers of goods and services to terminate the contract in the event that the customer enters an insolvency process. This has very important consequences for many businesses as it could expose them to greater financial risks.
Read more about thisIn part in response to the Covid-19 pandemic, legislation was passed by the government earlier this year which sought to assist companies to trade through the current economic climate. Included within the measures is a degree of protection from compulsory winding up.
The Corporate Insolvency and Governance Act 2020 (The Act), was laid before parliament on 20 May, and became law on 26 June. It is important creditors are aware of what changes have been implemented and the potential and impact which it may have upon debt recovery action you may be considering or have already commenced.
The main part of the Act affecting creditors is the temporary restriction on presentation of winding up petitions and the factors that the Court has to take into account when deciding whether to wind up a company.
On Thursday 24 September 2020 the government passed a further statutory instrument which extended the operation of these restrictions. As a result, the measures which were due to expire on Wednesday 30 September 2020 have now been extended until 31 December 2020.
A key point to note is that the Act has retrospective effect so any pending petitions presented after 27 April will be affected, along with any winding up orders made after that date.
The Act has introduced the following restrictions:
- A petition cannot be presented by a creditor during the period of 27 April 2020 and 31 December 2020 unless the creditor has reasonable grounds to believe that (a) coronavirus has not had a financial effect on the debtor, or (b) the debtor would have been unable to pay its debts even if coronavirus had not had a financial effect on the debtor;
- A petition cannot be presented after 27 April 2020 if it is based on a unsatisfied statutory demand served between 1 March 2020 until 31 December 2020;
- When deciding whether to make a winding up order the Court will need to be satisfied that the grounds giving rise to the petition would have arisen even if Covid-19 did not have a financial effect on the debtor;
- All winding up orders made between the 27 April and 31 December will automatically be void (that is, of no legal effect) unless the Court would have made the winding up order if the new law was in force at the time the order was made.
Yes. The Town and Country Planning (General Permitted Development) (Coronavirus) (England) (Amendment) Order 2020 came into force on 9 April 2020 giving permitted development rights for emergency development. The permitted development right is available to local authorities and health service bodies (as defined) on land owned, leased, occupied or maintained by it for the purposes of:
- Preventing an emergency
- Reducing, controlling or mitigating the effects of an emergency
- Taking other action in connection with an emergency
It could cover, for example, the temporary change of use of buildings into a Nightingale Hospital or the establishment of a testing centre.
The permitted development right is not permitted in certain instances and is subject to a number of conditions including the notification of the local planning authority and the cessation of the use before 31 December 2020.
Further detail of the permitted development right is available at the link below.
http://www.legislation.gov.uk/uksi/2020/412/made
Read more about thisThis free Getting back to business webinar was held on Thursday 7th May.
On this video, employment partner Edward Nuttman and Graham Vials went through what a consultation exercise is and when you are required to hold one. They then took you step by step through the process, describing all you will need to do to ensure legal compliance whilst at the same time being sensitive to the emotional and motivational impact on your employees and managers.
Read more about thisAt 10am on the 21st July, we hosted the fourth of our “in conversation…” webinars, this time featuring the ninth largest private bank in the world, Swiss-based Julius Baer. Ward Hadaway partner Emma Digby once again lead the conversation, this time with Luke Downes and Darren Hirst from their investment and relationship teams on “Market outlooks – the before, during and after”. They were joined by Andrew Evans from our private client team to feed in his perspective. This will be of interest to individuals who are thinking about investment portfolios and pension pots, but also businesses keen to see how investors are viewing their sectors, markets and customers.
Luke and Darren took us through how the markets looked pre-Covid, how they responded to the pandemic, and obviously most importantly what we might expect going forwards. They took a look at the sectors that are seeing the quickest bounce-back, discuss which countries are likely to be the most attractive for investors, and where the long term financial gains are expected to be. They also touched on that imminent event, shrouded in mist recently but no less significant – Brexit! What is the expected effect on the markets, and who are likely to be the winners and the losers?
Read more about this