How should an employer handle personal information in relation to NHS Test and Trace?
Employers will be collecting and sharing health information. Health information is sensitive and higher data protection standards apply. Here are a few key pointers.
- Update privacy notices to cover the new collection and sharing of employees’ information and provide these to the workforce. Be transparent and fair.
- Identify the legal basis and condition for use of this information and put any required paperwork in place. The ICO guidance will help. For some conditions such as the employment condition, an Appropriate Policy Document (APD) will be required. The ICO has an APD template.
- Only use the information for the purpose of managing the workforce during the pandemic.
- Only collect or share information if it’s necessary – if it’s a targeted and proportionate way of achieving your purpose.
- Make sure any health information collected and shared is accurate – there may be serious consequences if it’s not.
- Work out how long the information must be kept for. Keep a record of that period and act on it at the appropriate time.
- Security is very important – there may be malicious actors trying to trick employers and employees. Make sure employees know how to identify a genuine NHS Test and Trace contact. Keep the information secure. Use the ICO’s data sharing checklists** and keep a record of the disclosures made and why. Control external disclosures – only certain authorised members of staff should make them.
- Make sure individuals can still exercise their data protection rights – that’s also very important. Keep data protection records up-to-date and ensure any exports of personal information outside the UK are compliant.
- Before introducing employer-led testing like taking temperatures, thermal imaging or other potentially intrusive tests, work out if a data protection impact assessment (DPIA) is required. It will be if the intended processing is ‘high risk’. If it is, then carry out a full DPIA. It will help address the issues systematically and mitigate risks.
- All this demonstrates ‘accountability’ – it shows affected individuals and the ICO that the employer is complying with data protection requirements.
If you need further help, please visit the ICO’s data protection and coronavirus information hub or ask our data protection team.
** Please note that this link is to the ICO’s existing checklists and data sharing code of practice. We will update the link to the ICO’s new checklists after they are published.
Related FAQs
The application is made via the Companies House website, and only takes a few minutes to complete. Companies House have indicated that the extension is “automatic and immediate” and will be for three months.
Having said that the extension is “automatic”, their website also says that Companies that have already extended their filing deadline, or shortened their accounting reference period, may not be eligible for an extension.
If an extension is granted, it will not affect the due date for filing accounts in future years – so the deadline will revert to the usual date for the next accounting period.
The Chief Coroner adopts the approach taken by the Lord Chief Justice in that no physical hearing should take place unless it is urgent and essential business, and it is safe for all involved. If a hearing is to take place, social distancing must be maintained. All hearings that can take place remotely should do so, if it is not possible for social distancing requirements to be met. The expectation is that some hearings will go ahead, most notably Rule 23 hearings. Coroners are reminded that they must however conduct any remote hearings from a court. Decisions as to the most appropriate approach will be left to the senior coroner in that jurisdiction.
As we have already seen, some inquests will be adjourned, most notably those with multiple witnesses and/or a jury.
The guidance stresses the need, when dealing with medical professionals, for coroners to recognise their primary clinical commitments, particularly in these high-pressured times. This could mean avoiding or deferring requests for lengthy reports/ statements and accommodating clinical commitments if clinicians are called as witnesses.
The guidance encourages proactive reviews of outstanding responses to Prevention of Future Death reports and extending timescales for Trusts to respond.
Employers had until 31 July 2020 to make any claims for claim periods up to 30 June 2020. That was the end of the old scheme.
From 1 July 2020, claim periods must start and end within the same calendar month and must be for at least 7 days unless you are claiming for the first few days or the last few days in a month.
You can only claim for a period of fewer than 7 days if the period you are claiming for includes either the first or last day of the calendar month, and you have already claimed for the period ending immediately before it.
For example, if an employee is furloughed for 7 days spanning a month. You can claim the last 3 in one month, and 4 from the next.
The crucial point is that you cannot make claims that cross calendar months.
The first time that you could make a claim for days in July 2020 was 1 July 2020. You could not claim for periods in July 2020 before this point.
There are four criteria which must be satisfied if an agreement is to be considered exempt:
- It must improve production or distribution, or promoting technical or economic progress – the guidance suggests that cooperation ensuring essential goods and services can be made available to the public, or an important sub-set of the public such as key workers, will satisfy this criterion.
- It must allow consumers a fair share of the resulting benefit – the guidance suggests this will be the case where the action prevents or reduces shortages.
- It must not impose on the undertakings concerned restrictions which are not indispensable to the attainment of the above benefits – the guidance suggests this will be the case where the cooperation is the only reasonable option due to the urgency of the crisis and where the cooperation is temporary in nature.
- It must not afford the undertakings concerned the possibility of eliminating competition – therefore the parties must endeavour to retain competition in respect of the products (in particular price competition).
Employers who have apprentices on fixed-term contracts due to end during the pandemic should discuss arrangements with the apprentices including whether an extension to the contract can be offered to allow them to complete their apprenticeship.