Skip to content

How should an employer handle personal information in relation to NHS Test and Trace?

Employers will be collecting and sharing health information. Health information is sensitive and higher data protection standards apply. Here are a few key pointers.

  • Update privacy notices to cover the new collection and sharing of employees’ information and provide these to the workforce. Be transparent and fair.
  • Identify the legal basis and condition for use of this information and put any required paperwork in place. The ICO guidance will help. For some conditions such as the employment condition, an Appropriate Policy Document (APD) will be required. The ICO has an APD template.
  • Only use the information for the purpose of managing the workforce during the pandemic.
  • Only collect or share information if it’s necessary – if it’s a targeted and proportionate way of achieving your purpose.
  • Make sure any health information collected and shared is accurate – there may be serious consequences if it’s not.
  • Work out how long the information must be kept for. Keep a record of that period and act on it at the appropriate time.
  • Security is very important – there may be malicious actors trying to trick employers and employees. Make sure employees know how to identify a genuine NHS Test and Trace contact. Keep the information secure. Use the ICO’s data sharing checklists** and keep a record of the disclosures made and why. Control external disclosures – only certain authorised members of staff should make them.
  • Make sure individuals can still exercise their data protection rights – that’s also very important. Keep data protection records up-to-date and ensure any exports of personal information outside the UK are compliant.
  • Before introducing employer-led testing like taking temperatures, thermal imaging or other potentially intrusive tests, work out if a data protection impact assessment (DPIA) is required. It will be if the intended processing is ‘high risk’. If it is, then carry out a full DPIA. It will help address the issues systematically and mitigate risks.
  • All this demonstrates ‘accountability’ – it shows affected individuals and the ICO that the employer is complying with data protection requirements.

If you need further help, please visit the ICO’s data protection and coronavirus information hub or ask our data protection team.

** Please note that this link is to the ICO’s existing checklists and data sharing code of practice. We will update the link to the ICO’s new checklists after they are published.

Related FAQs

I am agreeing a financial settlement with my ex-spouse. Should we carry on negotiating despite COVID-19?

No. Before continuing any negotiations, you need to strongly consider whether now is the best time to settle. There is a myriad of uncertainty due to the pandemic, with unemployment rates increasing, volatility in the stock markets and difficulties regarding placing valuations on assets. This could all lead to the financial settlement being unfair to you and cause you financial difficulties in the future.

Any financial settlements reached following marital separation should be embodied in to a Court Order, to prevent future claims from your ex-spouse. As a general principle, although maintenance orders are always variable, financial orders in respect of capital (e.g. house, cash, investments, pensions) are final and it is very difficult to set aside a Court Order. The question will be whether or not the pandemic is judged as a Barder event, which broadly means something viewed as unforeseen. It would be challenging for you to argue that the effects of COVID-19 are unforeseen given the widespread expectation of an economic crisis. The Court previously found against a husband who wanted to revisit an Order that he said was unaffordable following the 2008 financial crisis, with one Judge commenting that a 90% drop in the Husband’s share price was a “natural process of price fluctuation”.

Even if you informally agree a settlement with your ex-spouse, and you do not have this reflected in a Court Order, your ex-spouse may still rely on this agreement within future Court proceedings and argue that you should be held to it.

It is, therefore, very dangerous to be reaching any financial settlements at this time with your ex-spouse without careful consideration and legal advice. Further, even if an agreement is reached, market volatility can mean longer implementation times, especially when a settlement relies on the sale of property.

What can suppliers of goods and services do to minimize risk?

If suppliers still wish to terminate the contract, they must contact the directors or the officeholder dealing with the insolvency process and obtain their approval to terminate the contract – which, of course, might not be given.

If the continued obligation under the contract to supply goods/services to the customer would place the supplier in financial hardship the supplier can apply to court for permission to terminate the contract.  This will involve time and legal expense.

What will happen to patent, trade mark and design registration applications that are currently being processed or which I want to file?

In recognition of the problems that the current situation is causing, the UK IPO classed the 24th March and all subsequent days as “interrupted days” which means that deadlines that fall within this period will be extended until the UK IPO declares that the interrupted days have ceased. As lockdown has begun to be eased, the IPO has now reviewed its position and has confirmed that the “interrupted days” period will come to an end on the 29 July 2020. This means that Thursday 30 July 2020 will be the first normal day of operation, therefore all “interrupted days” deadlines will expire on this day. Similarly, if your deadline falls after the period of interruption ends, this deadline will not be automatically extended.

The IPO is conscious that many businesses may still be in challenging positions when the period of “interrupted days” end. They will endeavour to continue to provide flexibility and support to assist businesses with their applications. They hope to temporarily remove fees for requests for extensions of deadlines, and will give further updates when this fee exemption is in place.

The IPO continues to encourage applicants to meet original deadlines where they are able.  As their offices are closed, the UK IPO is not currently processing paper forms (i.e. hard copy) and faxes. However, they are processing forms which have been submitted electronically, or via email and have made a new email address available for the submission of forms.

Intellectual Property Offices covering other territories have made their own announcements about the extension of deadlines. The EUIPO’s period of extension of deadlines came to an end on the 18th May. However, they have published a Guidance Note and accompanying webinar on the EUIPO website, detailing options for parties who may struggle to meet deadlines and remedies for those who may have missed deadlines.

What should businesses do now?

Many will have worked collaboratively with their suppliers and customers to deal with the immediate public health crisis. This will have meant offering flexibility as to contractual arrangements, whether in delivery dates, volumes of goods or services supplied, or even in the specification of what has been delivered.

If this is the case, it is important that businesses now do their legal housekeeping and make sure they have a proper record of what has been agreed. Unfortunately, our experience shows that many legal disputes arise out of amendments to contracts, typically where the parties to the contract each have a different view about what exactly they agreed to change.

We would therefore advise businesses to review any amendments that they might have agreed either verbally, by email, or otherwise, and consider whether they need to be captured in a more formal way which will make clear exactly what has been agreed to be varied, and (where appropriate) how long that variation will remain in force.

It’s also important to remember that some contracts contain provisions that set out specific requirements about how amendments are to be made. For example, they might require that amendments are made in writing (rather than verbally). These “No Oral Modification” clauses are commonly found in commercial contracts, and the courts have recently shown that they are willing to enforce them.

Failing to deal with amendments in accordance with contractual requirements could therefore have a serious impact on businesses as they recover from the disruption caused by the lockdown. If they end up in dispute with a customer or supplier, a business could find that the contract has not actually been amended in the way that they think – potentially leading to legal costs and liabilities at the worst possible time.

How do I make a Will while I am self-isolating?

Your lawyers can take your instructions by telephone, Skype, Zoom or a similar tool. However, the formal requirement to make a valid Will requires two witnesses to be present with you when you sign the Will and they must then add their signatures. The witnesses or their spouse cannot be beneficiaries or they will forfeit their inheritance.

The main challenge is how to have your witnesses with you at a time when we are being advised to socially distance. One option would be for the witnesses to stand outside your window or at a safe distance from you where they have a clear line of sight. The witnesses can watch you sign and then you could post your Will through your letterbox or leave it on a surface for them to pick up so that they can then sign their names too. If the witnesses live together then they do not need to keep two meters apart from each other.

The Wills Act 1837 requires that your witnesses must be physically present when you sign your Will and therefore it is not possible to do this by Skype, Zoom or similar video conferencing means. You may however want to video record the process by which you and your witnesses signed your Will so that you have a record of what was done, particularly if you are worried that someone might challenge the validity of your Will in due course.  You can of course re-execute your Will once social distancing has been relaxed if you are particularly concerned.

Be aware that the virus can remain on documents for more than 24 hours so it would be sensible for everyone to wear disposable gloves and in any event to wash hands thoroughly after handling the Will.

Emergency legislation may be passed regarding the requirement to make a valid Will but you must follow the current rules unless or until new legislation is passed.