Should I have a homeworking policy?
If organisations don’t have a formal home working policy, then they should set out, as soon as possible, in clear terms, what is expected of employees from a data protection perspective when working from home. These might include:
- If someone is using their own device for remote working, ensuring that any devices that hold work-related information have up-to-date anti-virus software and that broadband connections have properly configured firewalls
- Reminding staff to contact the organisation’s IT department if they encounter any issues with home working, and not to try and resolve any issues themselves
- Reminding staff that they should notify relevant individuals within the organisation if they consider that there might have been a personal data breach. A breach will still be notifiable even if it does occur at home during the pandemic. These should be logged by the organisation in their data breach log in the normal way
- Ensuring staff lock their devices whenever they are not using them
- Where possible, working in a separate part of the home to family members
- Ensuring confidentiality of information – advising staff not to have phone calls where others are likely to hear the conversation. This might mean moving to a different room, closing the door, or arranging a call for a more convenient time. If employees have smart speakers, you may want to consider advising them to either turn these off, if they are working in the same room as it, or work in a different room
- Wherever possible, avoid taking hard copy documents home, and, if papers are taken home, never placing those papers in a bin or using a home shredder – any such papers should be shredded back at the office in the usual way
- Locking any papers in a safe place
- Not using social media platforms (unless already used and permitted by the organisation) to discuss work matters
- Advising extra caution with incoming emails as at times such as this there may be an increased risk of fraud, email hacking, spear phishing etc.
- Avoiding information being sent to personal email accounts (for example, so it can then be printed at home)
- Reminding staff of your organisation’s Information Security policies, procedures and protocols. These could be emailed to all staff working from home or they could be directed to such documents on the organisation’s intranet, for example
Organisations should also ensure that their remote access systems can cope with increased demand.
Whilst the ICO appreciates the unprecedented nature of this pandemic, it does not mean that organisations can forget about their obligations as controllers of personal data. If a major data security breach were to happen, there is still the possibility of enforcement action where the organisation didn’t put in place good risk mitigation measures.
We have a specialist team of data protection lawyers here at Ward Hadaway, and would be happy to discuss any data protection concerns or issues that you might have.
Related FAQs
Ward Hadaway in conversation with Begbies Traynor webinar was recorded on Tuesday 16th June.
The business spotlight is firmly on Directors. Difficult, sometimes drastic decisions need to be made in unprecedented times. But the consequences of those decisions have long shadows, and Directors need to consider their future position through the lens of their creditors, shareholders, funders, HMRC and even the courts.
In conversation with leading business rescue and recovery specialists, Begbies Traynor, we focused on the proactive approach Directors can take in these exceptionally challenging times. We discussed very practical advice about the quickest routes to funding, how to bolster cash flow, protecting the Board, and ultimately how to be proactive and in control of the process if you think there is no way back for your business as a result of the pandemic.
It is important to note that the changes to insolvency law currently before parliament only deal with wrongful trading – all other duties remain the same. So Directors must still ensure they are acting in the best interests of the company, its shareholders and creditors. In this context, the webinar discussed funding options for keeping a business solvent, and how to manage the process if this is not possible.
Ward Hadaway partner Emma Digby talked to fellow partner and insolvency specialist Jane Garvin and Kris Wigfield and Matthew Cluer from Begbies Traynor about these issues.
This webinar is the first of our Yorkshire “In conversations with…” where we explore with other experts how businesses can get on the front foot in #gettingbacktobusiness.
All employers have a duty to prevent illegal working, and carrying out proper Right to Work checks are a fundamental part of this. In light of Covid-19, the Home Office has brought in some temporary measures for employers to use to carry out the requisite Right to Work checks. Failure to follow these could lead to enforcement action and penalties.
The Confederation of British Industry
“What you need to know about coronavirus and how it will impact your business”. This includes the very influential and highly regarded daily webinars hosted by Director General Dame Carolyn Fairburn.
https://www.cbi.org.uk/coronavirus-hub/
The Entrepreneurs’ Forum
Links to valuable resources collected by the Entrepreneurs’ Forum team as requested by its members and partner network, including on People, Finances, Physical and Mental Wellbeing, Technology and Leadership.
https://entrepreneursforum.net/support-hub
RTC North
Billed as containing “all the UK government information in one place”, this resource includes information on access to finance, employees, planning and leadership, Growth hub toolkits, and working from home.
https://www.rtcnorth.co.uk/covid-19/
Newcastle Gateshead Initiative (NGI)
Businesses across the UK and around the world are sharing their expertise in everything from remote working to business planning. The team at NGI have collated some of the most useful resources, alongside its own content which is designed to help partner organisations and other businesses across North East England.
https://www.ngi.org.uk/covid-19-business-resources/
North East of England Chamber of Commerce
The NEECC brings together its latest advice and guidance for businesses, as well as some of its own FAQs.
https://www.neechamber.co.uk/covid-19
Greater Manchester Chamber of Commerce
The Chamber has pulled together information about how it and others in the area are supporting all businesses during the Covid-19 outbreak.
https://www.gmchamber.co.uk/covid-19-coronavirus/
North East Growth Hub
The North East Growth Hub toolkit is intended to provide businesses with the latest advice, guidance and support available from government in response to the COVID-19 pandemic. Topics covered include:
- Financial support available for businesses
- Official guidance for employees, employers and businesses
- Advice on effective home working
- How to care for staff/suppliers/customers and prevent the spread of COVID-19
https://www.northeastgrowthhub.co.uk/toolkits/covid-19-coronavirus-toolkit
Pro-Manchester
Links to valuable resources collected by the Pro-Manchester team, including national Government support and advice, regional support and cyber security advice.
https://www.pro-manchester.co.uk/home/covid-19-support/
Innovation SuperNetwork
The Innovation SuperNetwork, a “network of networks”, detail on their website what their team of Innovation Managers are offering during these difficult times, as well as details of funding available, and what is being offered by their numerous partners.
It has now changed. Instead of being 3 weeks, it is now technically any period. However, 7 days is the minimum claim period you can now make.
Yes. The system for Probate Applications has moved on-line and continues to be available as well as by post. However, if you need to complete an Inheritance Tax Return IHT400 you are likely to experience problems collating information due to delays in many organisations being able to provide you with current values while their offices are closed and staff working remotely. Property valuations will be particularly problematic where surveyors or valuers are unable to attend properties to undertake non-urgent work. If you cannot wait, you must use your best endeavours to be as accurate as possible as regards the information you provide in the IHT400 and follow up by providing HMRC with actual values as soon as you can do so. HM Courts and Tribunal Service is however warning that delays can be expected at this time.