Skip to content

How should an employer handle personal information in relation to NHS Test and Trace?

Employers will be collecting and sharing health information. Health information is sensitive and higher data protection standards apply. Here are a few key pointers.

  • Update privacy notices to cover the new collection and sharing of employees’ information and provide these to the workforce. Be transparent and fair.
  • Identify the legal basis and condition for use of this information and put any required paperwork in place. The ICO guidance will help. For some conditions such as the employment condition, an Appropriate Policy Document (APD) will be required. The ICO has an APD template.
  • Only use the information for the purpose of managing the workforce during the pandemic.
  • Only collect or share information if it’s necessary – if it’s a targeted and proportionate way of achieving your purpose.
  • Make sure any health information collected and shared is accurate – there may be serious consequences if it’s not.
  • Work out how long the information must be kept for. Keep a record of that period and act on it at the appropriate time.
  • Security is very important – there may be malicious actors trying to trick employers and employees. Make sure employees know how to identify a genuine NHS Test and Trace contact. Keep the information secure. Use the ICO’s data sharing checklists** and keep a record of the disclosures made and why. Control external disclosures – only certain authorised members of staff should make them.
  • Make sure individuals can still exercise their data protection rights – that’s also very important. Keep data protection records up-to-date and ensure any exports of personal information outside the UK are compliant.
  • Before introducing employer-led testing like taking temperatures, thermal imaging or other potentially intrusive tests, work out if a data protection impact assessment (DPIA) is required. It will be if the intended processing is ‘high risk’. If it is, then carry out a full DPIA. It will help address the issues systematically and mitigate risks.
  • All this demonstrates ‘accountability’ – it shows affected individuals and the ICO that the employer is complying with data protection requirements.

If you need further help, please visit the ICO’s data protection and coronavirus information hub or ask our data protection team.

** Please note that this link is to the ICO’s existing checklists and data sharing code of practice. We will update the link to the ICO’s new checklists after they are published.

Related FAQs

I hold a licence but can’t trade. Can I terminate it?

A licence to occupy premises is not an interest land and operates as a commercial contract between the parties that enter into it. Licences tend to be put in place to cover short periods and consequently they are generally a lot more flexible than commercial leasing arrangements. To that extent occupants under licences should review the contract to establish whether or not there are any provision allowing them to terminate on notice to the Licensor.

Occupants under licences that are granted for longer periods without the option to terminate may try to argue that the contract has frustrated because they are effectively unable to occupy.

What tips can you share for remote mediations?

Remote mediations have become increasingly popular as a way of settling a dispute before it goes to court. There are a number of ways in which you can mediate remotely, but the most common platform is Zoom, due to its easy-to-use nature and the ability to have ‘break-out rooms’. We have answered some FAQs and set out a quick guide to remote mediations below.

What is remote mediation?

  • Mediation is a form of assisted negotiation, in which a neutral 3rd party mediator seeks to help the parties resolve their dispute. The process on the day is managed by the mediator and adopts certain key ground-rules. These are that discussions are private and cannot be referred to in court; and the process is entirely voluntary and non-binding, if and until a settlement is finalised. In the current pandemic mediations are now usually conducted remotely by video conference, instead of an in-person meeting.
  • The structure of the mediation will depend on the matters that are in dispute. Before the mediation the parties will exchange their views in position papers and prepare a bundle of the key documents.
  • Generally the parties will start the mediation in the same ‘room’ as the mediator, where they will be invited to set out their positions. The mediator will then put the parties into ‘break-out rooms’. These rooms serve as your own private ‘room’ which the mediator will join. You will therefore be able to have private discussions with the mediator without the other side being able to hear those discussions. The mediator will go between the ‘break-out rooms’ to discuss a party’s position further in order to attempt to reach a settlement.
  • If an agreement is reached, at the end of the mediation the Settlement Agreement will be drafted. The Settlement Agreement works as an enforceable contract. The Settlement Agreement will outline the details of what has been agreed and the intentions of the parties, such as any actions required, payments to be made and appropriate timescales. Each party will sign the Settlement Agreement, which can be done electronically.
  • It is not always possible to reach a resolution/agreement by mediation, but the mediator serves as an impartial third party in order to aid the process. If no agreement has been reached, the mediation may still prove useful as it will give you a better understanding of the other side’s position.

What should I do before the mediation to prepare?

  • Ensure that you are in an area with minimal distractions. Mediation is a confidential process, so make sure that you are in a private location.
  • Ensure that your microphone and camera work and that you have access to the online platform that will be used. We send our clients a link to the website in advance so that this can be tested out.
  • Consider any agreed dress code and dress appropriately.
  • Have a copy of the mediation bundle to hand, whether in hard or soft copy, and be aware of what documents are in there.

Any tips on what to do on the day?

  • Remember to make sure that before you have any private conversations with the mediator you are in your break-out room.
  • You may contact the mediator whilst being in the break-out room. On Zoom there is an ‘Ask for Help’ button on the screen. The mediator will then be prompted to join your room.
  • Ensure that you inform the mediator if you or others enter/leave the room. It is important that the mediator knows who is present.
  • Be mindful of body language and facial expressions as these can appear more enhanced on the screen, and they are easier to pick up in a remote mediation.
  • Stay calm and focussed at all times. When you have a dispute it is sometimes tricky to maintain a calm manner, but this is always vital in attempting to reach an agreement.
  • When engaging with the mediator avoid any external distractions such as text messages and emails, as it may come across that you are not interested in the process. It is important to pay attention so that you do not miss any dialogue which may be key to any agreement that is reached.
  • When you are in the break-out room without the mediator make sure that you take breaks and keep refreshed, as virtual mediations can be tiring.
Can the apprentice take a break or pause in learning due to coronavirus?

A break or pause in learning can be initiated where the interruption to learning due to Covid-19 is greater than four weeks. This must be reported as a formal break in learning. In such circumstance the funding to the training provider will be suspended for the duration of the break. Previously, the rules only allowed an apprentice to initiate this break in learning but this has been expanded to give employers and training providers the right to initiate this. Training providers should continue with their monthly IRL submissions to the ESFA. During breaks in apprenticeships it is not necessary for the apprentice to comply with the minimum of 20% on the job training requirement but this will resume when the break ends.

What do I do if I have been endorsed for a Global Talent, Start-up or Innovator visa but my endorsement is due to expire?

Endorsing bodies are still processing applications for these visa types and endorsements are still being issued. You usually have to apply for your visa within 3 months of receipt of your endorsement. In most cases you will still be able to submit your application online within this timeframe however it will not be completed as visa application centres across the world are closed. If you cannot apply because you haven’t been able to travel and your endorsement has expired, you may still be eligible for a visa. You should make your application as planned and UKVI will consider all applications on a case by case basis.

Have you had any safeguarding issues in relation to staff they see and do you follow your normal safeguarding pathway?

Safeguarding issues are relatively uncommon, however, if they do occur, the normal safeguarding procedure of the organisation should be followed.