Should I have a homeworking policy?
If organisations don’t have a formal home working policy, then they should set out, as soon as possible, in clear terms, what is expected of employees from a data protection perspective when working from home. These might include:
- If someone is using their own device for remote working, ensuring that any devices that hold work-related information have up-to-date anti-virus software and that broadband connections have properly configured firewalls
- Reminding staff to contact the organisation’s IT department if they encounter any issues with home working, and not to try and resolve any issues themselves
- Reminding staff that they should notify relevant individuals within the organisation if they consider that there might have been a personal data breach. A breach will still be notifiable even if it does occur at home during the pandemic. These should be logged by the organisation in their data breach log in the normal way
- Ensuring staff lock their devices whenever they are not using them
- Where possible, working in a separate part of the home to family members
- Ensuring confidentiality of information – advising staff not to have phone calls where others are likely to hear the conversation. This might mean moving to a different room, closing the door, or arranging a call for a more convenient time. If employees have smart speakers, you may want to consider advising them to either turn these off, if they are working in the same room as it, or work in a different room
- Wherever possible, avoid taking hard copy documents home, and, if papers are taken home, never placing those papers in a bin or using a home shredder – any such papers should be shredded back at the office in the usual way
- Locking any papers in a safe place
- Not using social media platforms (unless already used and permitted by the organisation) to discuss work matters
- Advising extra caution with incoming emails as at times such as this there may be an increased risk of fraud, email hacking, spear phishing etc.
- Avoiding information being sent to personal email accounts (for example, so it can then be printed at home)
- Reminding staff of your organisation’s Information Security policies, procedures and protocols. These could be emailed to all staff working from home or they could be directed to such documents on the organisation’s intranet, for example
Organisations should also ensure that their remote access systems can cope with increased demand.
Whilst the ICO appreciates the unprecedented nature of this pandemic, it does not mean that organisations can forget about their obligations as controllers of personal data. If a major data security breach were to happen, there is still the possibility of enforcement action where the organisation didn’t put in place good risk mitigation measures.
We have a specialist team of data protection lawyers here at Ward Hadaway, and would be happy to discuss any data protection concerns or issues that you might have.
Related FAQs
Many planning permissions contain a condition restricting the hours within which a developer can carry out construction work or are subject to an approved construction management plan setting out the permitted construction hours.
The Business and Planning Act 2020 entered the statute books on 22 July 2020. Section 16 of the Act incorporates a new S.74B into the Town and Country Planning Act 1990. The effect is that any condition/approved document which limits construction hours on a site could be amended through an application to the local planning authority. The application to the local planning authority must set out the date on which the proposed extension to construction hours shall cease (such date being no later than 1 April 2021, after which the original conditions over construction hours will resume). The local planning authority must determine the application within 14 days (beginning with the day after the application was submitted) otherwise there is deemed approval.
New guidance has been published alongside the Act and is available here
The Chancellor announced:
- A new “job retention bonus” for employers to access for furloughed employees subject to certain conditions being met – see below for more information.
- A “Kickstart scheme” which will directly pay employers to create jobs for any 16-24 year old at risk of long-term unemployment.
- Incentives for employers to take on apprentices.
As a result of the CJRS being extended, the Job Retention Bonus will no longer be paid in February 2021.
The Confederation of British Industry
“What you need to know about coronavirus and how it will impact your business”. This includes the very influential and highly regarded daily webinars hosted by Director General Dame Carolyn Fairburn.
https://www.cbi.org.uk/coronavirus-hub/
The Entrepreneurs’ Forum
Links to valuable resources collected by the Entrepreneurs’ Forum team as requested by its members and partner network, including on People, Finances, Physical and Mental Wellbeing, Technology and Leadership.
https://entrepreneursforum.net/support-hub
RTC North
Billed as containing “all the UK government information in one place”, this resource includes information on access to finance, employees, planning and leadership, Growth hub toolkits, and working from home.
https://www.rtcnorth.co.uk/covid-19/
Newcastle Gateshead Initiative (NGI)
Businesses across the UK and around the world are sharing their expertise in everything from remote working to business planning. The team at NGI have collated some of the most useful resources, alongside its own content which is designed to help partner organisations and other businesses across North East England.
https://www.ngi.org.uk/covid-19-business-resources/
North East of England Chamber of Commerce
The NEECC brings together its latest advice and guidance for businesses, as well as some of its own FAQs.
https://www.neechamber.co.uk/covid-19
Greater Manchester Chamber of Commerce
The Chamber has pulled together information about how it and others in the area are supporting all businesses during the Covid-19 outbreak.
https://www.gmchamber.co.uk/covid-19-coronavirus/
North East Growth Hub
The North East Growth Hub toolkit is intended to provide businesses with the latest advice, guidance and support available from government in response to the COVID-19 pandemic. Topics covered include:
- Financial support available for businesses
- Official guidance for employees, employers and businesses
- Advice on effective home working
- How to care for staff/suppliers/customers and prevent the spread of COVID-19
https://www.northeastgrowthhub.co.uk/toolkits/covid-19-coronavirus-toolkit
Pro-Manchester
Links to valuable resources collected by the Pro-Manchester team, including national Government support and advice, regional support and cyber security advice.
https://www.pro-manchester.co.uk/home/covid-19-support/
Innovation SuperNetwork
The Innovation SuperNetwork, a “network of networks”, detail on their website what their team of Innovation Managers are offering during these difficult times, as well as details of funding available, and what is being offered by their numerous partners.