If an employee has had a coronavirus test, can we require them to disclose evidence of their test results?
Obtaining an employee’s Covid-19 test result will amount to processing personal data for the purposes of the General Data Protection Regulation 2016/679 (GDPR) and information about an employee’s health is a special category of data (sensitive personal data under the Data Processing Act 2018 (DPA)).
In accordance with the GDPR and DPA, there must be lawful grounds for processing such information. Most employers rely on employees’ consent to obtain medical information and process sensitive personal data and if the employee is unwilling to give consent, you will not normally be entitled to the information.
Special category data can be processed lawfully if it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller. Employers may be able to require an employee to disclose their Covid-19 test if there is a substantial public interest, such as ensuring that the employee self-isolate if they have a positive test. However, there is a risk that this measure could be considered disproportionate particularly if it is enforced on all employees as a blanket measure.
Related FAQs
Privacy policy – You must make sure the relevant privacy policies deal with how you will process Covid-19 data. You should have an employee privacy policy and this may already deal with health data (if it doesn’t, it should). You might also need to look at privacy policies for customers, visitors and suppliers. This ensures that processing is lawful, fair and transparent.
Lawful processing conditions – You will need to consider which processing conditions you are relying on (remembering that you need both an Article 6 condition and an Article 9 condition – this is the part of the GDPR which deals with special category data). As a lot of the data you collect will be about employees, you can’t use consent so you will have to find another lawful reason under GDPR which allows you to process the data.
Appropriate policy document – When you are considering your Article 9 processing conditions, remember you must also have an “appropriate policy document” in place.
Processing record – Finally make sure your processing record is up to date with information on what data you collect and use.
In most circumstances the answer will be no. It would be an infringement of their human rights. It could also be a criminal assault.
However where there is a high risk to employees of exposure to COVID-19, such as care homes and healthcare environments, you might be able to make it a requirement of their role to have the vaccine.
First, consider whether you need to have a blanket requirement covering all employees or whether only certain groups who work in the most high risk areas require the vaccine.
You will need to do a thorough risk assessment balancing the amount that the risk of exposure would be reduced against the interference with the employee’s human rights. Consideration will need to be given as to whether insisting on the vaccine is proportionate to the risk and whether other less invasive steps could be taken instead, such as maintaining social distancing, wearing a mask, washing hands.
Any requirement for employees to be vaccinated should be communicated clearly to employees and trade unions together with a clear explanation for why it is necessary.
There are several options that can be used at this time to try and settle disputes. If it is not possible to settle a dispute via direct discussions between the parties then some form of Alternative Dispute Resolution (“ADR”) might be appropriate. Mediation is the most popular form of ADR. Most people’s perception of mediation is that it needs to be in person but that does not have to be the case.
Mediation can take place online or on the telephone. Most, if not all, ADR providers remain open for business and are quickly changing their business model to ensure that mediations can still take place. Mediation can be arranged at reasonably short notice and certainly so far as the online model is concerned, it mirrors the process that is adopted when parties appear in person. Online mediation allows for joint sessions with the mediator to take place and also for the parties to break out into their respective rooms for private discussions. If a dispute settles at mediation – and the vast majority do – then the agreement reached between the parties is binding and can be enforced.
A group of senior former judges and legal academics have now called for an acceleration in the use of ADR in light of the current circumstances. They have stated that courts should promote “and where appropriate require” the use of ADR. Mediation has particularly seen an increase in growth at this time.
ADR normally results in a quicker outcome than if the matter proceeds in the courts. Due to its conciliatory nature it is a very useful process where parties continue to be in a trading relationship. Contracting parties should also consider building ADR into dispute resolution clauses in their contracts so that in the event there is a dispute the focus is on resolving the dispute as soon as possible before it escalates into litigation.”
It could be possible depending on your contract. If there is no force majeure clause in a contract, it may be possible that the contract may have been “frustrated” by emergency legislation. In legal terms, a contract can be frustrated where an event occurs after it is entered into which was not contemplated by any party at the outset, is not due to the fault of any party, and which makes the performance of the contract impossible.
If this is the case, the contract could be “discharged”, meaning that the parties’ obligations under the contract are no longer binding.
It is possible that a contract could be frustrated within this particular legal doctrine by a change in the law that makes performance of a contract illegal. However, if it simply becomes more difficult, or more expensive, then the legal tests for frustration might not be satisfied. There are also limits to the application of the rule if the frustrating event was already known about at the time the contracted was entered into.
Again, careful legal advice will be required at an early stage. The rules about force majeure or frustration might help businesses that find themselves unable to perform a contract because of the coronavirus outbreak.
Any new contracts that are concluded should expressly deal with the possibility that performance might become more difficult, more costly, or impossible to perform.
It would apply if the contractor uses an intermediary to provide their services or labour and they would be deemed to be an employee or office holder for tax purposes if they were hired directly by the end user client rather than via the intermediary PSC. This would of course require an assessment of employment status for tax purposes.
Contractors who are not taxed in the UK and supply their services exclusively from outside of the UK are unaffected.
If IR35 applies, tax and NIC’s should be deducted under PAYE by the PSC. In reality this has not been happening so a major reform of the regime was due to be implemented in April 2020. The changes were postponed by one year and are due to take effect from 6 April 2021.
“Within IR35” means a contractor arrangement is caught by IR35 and the individual should be taxed as an employee.
“Outside IR35” means a contractor arrangement is not caught by IR35 and the contractor status is fine.