Should I have a homeworking policy?
If organisations don’t have a formal home working policy, then they should set out, as soon as possible, in clear terms, what is expected of employees from a data protection perspective when working from home. These might include:
- If someone is using their own device for remote working, ensuring that any devices that hold work-related information have up-to-date anti-virus software and that broadband connections have properly configured firewalls
- Reminding staff to contact the organisation’s IT department if they encounter any issues with home working, and not to try and resolve any issues themselves
- Reminding staff that they should notify relevant individuals within the organisation if they consider that there might have been a personal data breach. A breach will still be notifiable even if it does occur at home during the pandemic. These should be logged by the organisation in their data breach log in the normal way
- Ensuring staff lock their devices whenever they are not using them
- Where possible, working in a separate part of the home to family members
- Ensuring confidentiality of information – advising staff not to have phone calls where others are likely to hear the conversation. This might mean moving to a different room, closing the door, or arranging a call for a more convenient time. If employees have smart speakers, you may want to consider advising them to either turn these off, if they are working in the same room as it, or work in a different room
- Wherever possible, avoid taking hard copy documents home, and, if papers are taken home, never placing those papers in a bin or using a home shredder – any such papers should be shredded back at the office in the usual way
- Locking any papers in a safe place
- Not using social media platforms (unless already used and permitted by the organisation) to discuss work matters
- Advising extra caution with incoming emails as at times such as this there may be an increased risk of fraud, email hacking, spear phishing etc.
- Avoiding information being sent to personal email accounts (for example, so it can then be printed at home)
- Reminding staff of your organisation’s Information Security policies, procedures and protocols. These could be emailed to all staff working from home or they could be directed to such documents on the organisation’s intranet, for example
Organisations should also ensure that their remote access systems can cope with increased demand.
Whilst the ICO appreciates the unprecedented nature of this pandemic, it does not mean that organisations can forget about their obligations as controllers of personal data. If a major data security breach were to happen, there is still the possibility of enforcement action where the organisation didn’t put in place good risk mitigation measures.
We have a specialist team of data protection lawyers here at Ward Hadaway, and would be happy to discuss any data protection concerns or issues that you might have.
Related FAQs
The current position is that the PSC is responsible for assessing whether IR35 applies. This current regime has been difficult to police by HMRC and HMRC considers there is widespread flouting of the rules by contractors.
From April 2021 the responsibility for assessing whether IR35 applies will shift to the end user/client (with the exception of ‘small’ companies) which will require an assessment to be carried out on a contract by contract basis. HMRC anticipates that this will be easier to monitor and that end user businesses will be more compliant.
The reformed regime will apply to payments made on or after 6 April 2021 for services carried out on or after this date.
The Government has produced workplace guidance for employers, setting out 2 key messages for employers:
- Continue to make workplaces as safe as possible; and
- Encourage workers to heed any notifications to self-isolate and to support them while they are require to isolate
Government guidance can be accessed here: How it works (an overview) and Workplace guidance for employers.
With the outbreak of coronavirus leading to a requirement for more employees to be working remotely, especially following Government advice that all non-essential travel including to and from work should be avoided, there has been an increased requirement for businesses to be more flexible in their approach to signing contracts.
The traditional approach has been for contracts to be printed and signed with a “wet ink” signature. However, this is not a strict legal requirement in the majority of circumstances and contracts can be formed without this degree of formality. English law recognises that contracts can be formed by electronic means – including the exchange of emails or the typing of a name into a document to signify agreement to it.
Whilst this approach offers a lot of flexibility, more sophisticated electronic signature tools are recommended for important documents, to enable the identity of the signatory to be validated and reduce the possibility of fraud.
If businesses are considering changing their contracting processes because of coronavirus, or because of a general shift towards paperless working, it is important to ensure that proper approval processes remain in place, and to consider whether a software tool should be used to complement them. Systems such as DocuSign are widely used.
There also remain some situations where legal advice is recommended before relying on an electronic signature:
- Where the other party is abroad – as local laws that are different from English law might apply
- If executing a deed – the law requires certain types of document to be executed as a deed (for example, transfers of land and powers of attorney), and the issues around electronic signature and witnessing are more complicated here
The Confederation of British Industry
“What you need to know about coronavirus and how it will impact your business”. This includes the very influential and highly regarded daily webinars hosted by Director General Dame Carolyn Fairburn.
https://www.cbi.org.uk/coronavirus-hub/
The Entrepreneurs’ Forum
Links to valuable resources collected by the Entrepreneurs’ Forum team as requested by its members and partner network, including on People, Finances, Physical and Mental Wellbeing, Technology and Leadership.
https://entrepreneursforum.net/support-hub
RTC North
Billed as containing “all the UK government information in one place”, this resource includes information on access to finance, employees, planning and leadership, Growth hub toolkits, and working from home.
https://www.rtcnorth.co.uk/covid-19/
Newcastle Gateshead Initiative (NGI)
Businesses across the UK and around the world are sharing their expertise in everything from remote working to business planning. The team at NGI have collated some of the most useful resources, alongside its own content which is designed to help partner organisations and other businesses across North East England.
https://www.ngi.org.uk/covid-19-business-resources/
North East of England Chamber of Commerce
The NEECC brings together its latest advice and guidance for businesses, as well as some of its own FAQs.
https://www.neechamber.co.uk/covid-19
Greater Manchester Chamber of Commerce
The Chamber has pulled together information about how it and others in the area are supporting all businesses during the Covid-19 outbreak.
https://www.gmchamber.co.uk/covid-19-coronavirus/
North East Growth Hub
The North East Growth Hub toolkit is intended to provide businesses with the latest advice, guidance and support available from government in response to the COVID-19 pandemic. Topics covered include:
- Financial support available for businesses
- Official guidance for employees, employers and businesses
- Advice on effective home working
- How to care for staff/suppliers/customers and prevent the spread of COVID-19
https://www.northeastgrowthhub.co.uk/toolkits/covid-19-coronavirus-toolkit
Pro-Manchester
Links to valuable resources collected by the Pro-Manchester team, including national Government support and advice, regional support and cyber security advice.
https://www.pro-manchester.co.uk/home/covid-19-support/
Innovation SuperNetwork
The Innovation SuperNetwork, a “network of networks”, detail on their website what their team of Innovation Managers are offering during these difficult times, as well as details of funding available, and what is being offered by their numerous partners.
You can rotate staff on furlough or flexible furlough.
One option is to make it clear in the letter agreeing to being furloughed that there is an open ended right to rotate and to be able to take them off furlough and bring them back and put them back on.
So the employer reserves the ability to rotate by building into the agreement, but only exercises it if it is permissible.
Rotation is quite key for employers who need to make a temporary reduction to their overheads but want to retain the skills base to call back when work picks up. Having furloughed staff return on a part-time basis may reduce the need to rotate.
It also helps in the employer being able to show that they are treating the workforce as fairly as possible and everyone is taking a reduction. Get in touch if you need help preparing the documentation for furlough that will permit rotation or flexible furlough.
Read more about flexible furlough and how this can be used as part of the CJRS.