How should an employer handle personal information in relation to NHS Test and Trace?
Employers will be collecting and sharing health information. Health information is sensitive and higher data protection standards apply. Here are a few key pointers.
- Update privacy notices to cover the new collection and sharing of employees’ information and provide these to the workforce. Be transparent and fair.
- Identify the legal basis and condition for use of this information and put any required paperwork in place. The ICO guidance will help. For some conditions such as the employment condition, an Appropriate Policy Document (APD) will be required. The ICO has an APD template.
- Only use the information for the purpose of managing the workforce during the pandemic.
- Only collect or share information if it’s necessary – if it’s a targeted and proportionate way of achieving your purpose.
- Make sure any health information collected and shared is accurate – there may be serious consequences if it’s not.
- Work out how long the information must be kept for. Keep a record of that period and act on it at the appropriate time.
- Security is very important – there may be malicious actors trying to trick employers and employees. Make sure employees know how to identify a genuine NHS Test and Trace contact. Keep the information secure. Use the ICO’s data sharing checklists** and keep a record of the disclosures made and why. Control external disclosures – only certain authorised members of staff should make them.
- Make sure individuals can still exercise their data protection rights – that’s also very important. Keep data protection records up-to-date and ensure any exports of personal information outside the UK are compliant.
- Before introducing employer-led testing like taking temperatures, thermal imaging or other potentially intrusive tests, work out if a data protection impact assessment (DPIA) is required. It will be if the intended processing is ‘high risk’. If it is, then carry out a full DPIA. It will help address the issues systematically and mitigate risks.
- All this demonstrates ‘accountability’ – it shows affected individuals and the ICO that the employer is complying with data protection requirements.
If you need further help, please visit the ICO’s data protection and coronavirus information hub or ask our data protection team.
** Please note that this link is to the ICO’s existing checklists and data sharing code of practice. We will update the link to the ICO’s new checklists after they are published.
Related FAQs
All organisations have underperformers. Capability is a potentially fair reason to dismiss and is separate to any redundancy procedures.
Generally, capability falls into either absences through illness or underperformance in the role. Those who are absent through sickness can be furloughed, but when furlough comes to an end they will need to go back onto sickness. If you are looking to tackle absence then you need to tackle long term and short term absence in a different way.
Long term absence: You need to establish whether the employee is able to return to work (with or without reasonable adjustments) in the medium term. This requires medical opinion and be careful of disability issues. Reasonable adjustments are likely to be important.
Short term absence: You will need to demonstrate that you have fair absence triggers in place and there is normally be a 3 stage procedure: warning and final warning followed by dismissal on notice. Each stage needs a fair procedure, with written information, a fair hearing and the opportunity to appeal. Be careful of disability issues.
As for underperformance: To tackle this, you will need to have clear SMART objectives in place and evidence of the employee failing to meet these. There would then normally be a 3 stage procedure: warning and final warning followed by dismissal on notice. Each stage needs a fair procedure, with written information, a fair hearing and the opportunity to appeal.
We have developed a Toolkit to help with these issues. The Toolkit contains:
- LO1 How to Guide: Lay off and short time working
- LO2 Letter directing employee to take annual leave
- LO3 Letter confirming lay off (contractual right)
- LO4 Letter confirming short time working (contractual right)
- LO5 Letter proposing lay off (no contractual right)
- LO6 Letter proposing short time working (no contractual right)
- LO7 Counter notice disputing entitlement to claim redundancy payment
- LO8 Script for announcing lay off or short time working (contractual right)
- LO9 Script for announcing lay off or short time working (no contractual right)
- LO10 Letter proposing reduction in working hours and pay
The cost of this Toolkit is £500 plus vat. If you would like to find out more about the Toolkit, please speak to your usual Ward Hadaway employment contact, or get in touch one of the contacts at the bottom of this page.
The government has announced a number of measures to try to protect businesses during the current period of uncertainty. However there is no outright ban on creditors being able to take legal action to recover money they are owed, though there are temporary restrictions on some forms of legal action, like winding up petitions.
However, it is important to note that these measures only relate to winding up proceedings. Creditors will still be free to commence county court claims.
The new Corporate Insolvency and Governance Act 2020 brings in a new “moratorium” procedure. Businesses in financial difficulty that are viable and can be rescued will now be able to work with an insolvency practitioner to obtain at least 20 business days’ breathing space from creditors to allow the business to formulate a plan to deal with its financial problems.
For more information on the Corporate Insolvency and Governance Act, click here
As part of the raft of measures put forward by the government over recent months, there are also restrictions on landlords taking action to evict commercial tenants who miss rent payments. Various payment holidays and forbearance have been put in place in respect of certain tax liabilities and some business rates.
If your business is going to go into an insolvency process like administration or a company voluntary arrangement, there is the ability to obtain a freeze on creditors taking action whilst those procedures are put in place. However, these sorts of moratoriums will not be available to everyone and in any event not unless an insolvency process is being instigated.
Regardless of whether a business has formal protection from creditors or not, engagement with creditors and trying to reach agreement with them to deal with the debt is therefore vital. Much of the protection measures that the Government has introduced like curbing the ability of landlords to evict a commercial tenant, do not wipe out the debt. They simply prevent action being taken or a payment becoming due for a short time. All businesses should use that time to consider how those debts can be dealt with and engage with the relevant stakeholders sooner rather than later.
We have developed a toolkit to assist with compliance. The Toolkit contains a specimen contract; detailed guidance; step by step guides and flowcharts; details of the factors to take into account for the status determination test; procedures for challenging the determination; and standard letters for the process. Click here to fill in a form and register your interest in the Toolkit, which contains:
- Detailed guidance in the form of Key Facts
- Employment status checklist
- Employment status assessment flowchart
- Status questionnaire and guidance
- Letter confirming self-employed status (agency)
- Letter confirming employed status (agency)
- Letter confirming self-employed status (direct with PSC)
- Letter confirming employed status (direct with PSC)
- Status disagreement process guidance
- Status disagreement process flowchart
- Letter confirming outcome of status disagreement process
- Consultancy agreement
As we move to look at re-opening businesses and getting people back into the workplace there is work to be done by employers, firstly in planning how they are going to do this, and secondly, communicating those plans to staff. The only way in which businesses are going to be able to manage the transition back to some form of normality is by speaking to their staff and re-assuring them about the measures that will be put in place to safeguard their health and safety in order to enable them to return. Any successful return to work will need to based on carefully thought out plans and providing re-assurances to employees that necessary action is being taken.
Employers will be focusing on:
- How do I get my workforce back safely, and
- How do I give my workforce the confidence to return.