If an employee has had a coronavirus test, can we require them to disclose evidence of their test results?

The basics of health and safety law requires that employers take “all reasonably practicable steps” to ensure workers’ safety and that a suitable and sufficient assessment of risk is undertaken. It is the individual assessment of Covid-19 risk in each workplace that will be central. Employers will be required to conduct a robust risk assessment and then, following the hierarchy of controls, put robust processes and safeguards in place to address those risks.

UK government guidance and HSE advice is continually evolving, which in practice means that any risk assessment will need to be reviewed very regularly as that guidance develops. There is flexibility for individual businesses within the overall government framework and there will need to be a process of evaluation to ensure that the measures in place continue to meet the requirements.

The starting point of avoid, eliminate and control means looking at individuals continuing to work from home where possible (the fewer the number of people back in the workplace the lower the risk), and if not look at risk management, which leads to administrative controls – i.e. changing work practices before ending up at PPE. PPE is generally seen as control of last resort but in practice – facemasks, disposable gloves and constant prompts to wash hands for example.

In terms of changing working practices, employers should be thinking about:

• the workspace and how this is laid layout
• how do we make sure it is kept clean and hygienic
• how do we keep people apart
• how can we use toilets, canteens or other shared spaces/facilities safely
• how do we promote and enable higher levels of workplace hygiene
• if we are going to rely on PPE – can we get it, and is it suitable
• what about limiting customer interactions
• will there be enough first aiders on site
• can we manage fire safety, deliveries etc
• what about higher risk workers
• should work tools and equipment be allocated on an individual basis to employees.

These decisions need to be recorded and clearly communicated to staff members.

With the loss of face-to-face meetings in the current situation, video conferencing has taken centre stage. But how do you do that in a compliant way? Here are some of the main high-level data protection issues to consider when selecting and implementing a new third party provider’s video conferencing system.

1. Make sure you do your due diligence on the security measures offered by the provider. Clearly you can’t visit them, so look at the information offered publicly by the provider and read good quality, reliable, third party sources and ask the provider questions directly. Also ask any other organisations you know that use the provider. Document all this.
2. If personal information is being sent outside of the UK/European Economic Area, make sure that transfer complies with GDPR. If it’s a US provider, is it registered in the EU-US Privacy Shield list or does it offer a model clause contract (you’re likely to need the 2010 version)? Or is the service provided from a country whose data protection laws offer equivalent protection to those in Europe? Look at the support service as well as the hosting. Document this.
3. Make sure you put a compliant processor agreement in place. The provider should offer one as part of the contract terms. Check it meets GDPR requirements.
4. You’re likely to need to update your privacy notice, particularly if you’re going to record calls. Provide participants with a short message and link to the privacy notice in the meeting invite and on any registration page.
5. Create or update other GDPR-mandated documentation – for example, depending on your use, you may need a legitimate interests assessment and to update your record of processing.
6. Finally, configure and use the system in a secure and compliant way. Look at the settings/options carefully and think through the security and compliance implications of each. That could include deciding who in the meeting can share their screen; whether or not you use passwords for participants; whether or not to record, and if you’re going to record, where to store the recording. Document your decisions and the reasons for them.

The ICO has said it understands that resources, whether they are finances or people, might be diverted away from usual compliance work during the pandemic. However the last thing you need at the moment is to create a bigger problem than the one you are trying to solve. So do the best you can, ask for help from one of our specialists if you need it, and keep the whole thing under review.

On 16 April 2020, Ian Hulme, the ICO’s Director of Assurance, posted a blog for business owners, employers and managers about how to safely roll out the latest video conferencing technology.

On 21 April 2020, the NCSC published security guidance for organisations on choosing, configuring and deploying video conferencing services.

• On admission to critical care, the risks, benefits and likely outcomes of the different treatment options should be discussed with patients, families and carers so they can make informed decisions about their treatment wherever possible.
• A member of the critical care team should be involved in these discussions whenever the patient or team needs advice about critical care to make decisions about treatment.

There are two stages:

• Stage 1 – The provision of written information to the representatives.
• Stage 2 – Consultation on the proposed redundancies “with a view to reaching agreement” about certain matters

Stage 1: Provision of information

The first stage in the collective consultation process is to provide the representatives with written information including details of the proposed redundancies (often called a section 188 letter). This information must be given to the appropriate representatives and the time limit before dismissals can take effect does not start to run until they have received it. It is this information which ‘starts the clock’.

It is possible that there will be changes to the proposals during the consultation process: indeed that is part of the reason for the process. The employer’s obligation is not just to provide the appropriate representatives with the relevant information at the start of the process. It is under a continuing obligation to provide them with information in writing about any developments during the consultation process (although later changes do not ‘restart the clock’ before dismissals can take effect).

Stage 2: Consultation on the proposed redundancies “with a view to reaching agreement” about certain matters

The consultation process must include consultation “with a view to reaching agreement with the appropriate representatives” on ways of:

• Avoiding the dismissals
• Reducing the number of employees to be dismissed
• Mitigating the consequences of the dismissals

Your lawyers can take your instructions by telephone, Skype, Zoom or a similar tool. However, the formal requirement to make a valid Will requires two witnesses to be present with you when you sign the Will and they must then add their signatures. The witnesses or their spouse cannot be beneficiaries or they will forfeit their inheritance.

The main challenge is how to have your witnesses with you at a time when we are being advised to socially distance. One option would be for the witnesses to stand outside your window or at a safe distance from you where they have a clear line of sight. The witnesses can watch you sign and then you could post your Will through your letterbox or leave it on a surface for them to pick up so that they can then sign their names too. If the witnesses live together then they do not need to keep two meters apart from each other.

The Wills Act 1837 requires that your witnesses must be physically present when you sign your Will and therefore it is not possible to do this by Skype, Zoom or similar video conferencing means. You may however want to video record the process by which you and your witnesses signed your Will so that you have a record of what was done, particularly if you are worried that someone might challenge the validity of your Will in due course.  You can of course re-execute your Will once social distancing has been relaxed if you are particularly concerned.

Be aware that the virus can remain on documents for more than 24 hours so it would be sensible for everyone to wear disposable gloves and in any event to wash hands thoroughly after handling the Will.

Emergency legislation may be passed regarding the requirement to make a valid Will but you must follow the current rules unless or until new legislation is passed.