The Media

Employers will be collecting and sharing health information. Health information is sensitive and higher data protection standards apply. Here are a few key pointers.

• Update privacy notices to cover the new collection and sharing of employees’ information and provide these to the workforce. Be transparent and fair.
• Identify the legal basis and condition for use of this information and put any required paperwork in place. The ICO guidance will help. For some conditions such as the employment condition, an Appropriate Policy Document (APD) will be required. The ICO has an APD template.
• Only use the information for the purpose of managing the workforce during the pandemic.
• Only collect or share information if it’s necessary – if it’s a targeted and proportionate way of achieving your purpose.
• Make sure any health information collected and shared is accurate – there may be serious consequences if it’s not.
• Work out how long the information must be kept for. Keep a record of that period and act on it at the appropriate time.
• Security is very important – there may be malicious actors trying to trick employers and employees. Make sure employees know how to identify a genuine NHS Test and Trace contact. Keep the information secure. Use the ICO’s data sharing checklists** and keep a record of the disclosures made and why. Control external disclosures – only certain authorised members of staff should make them.
• Make sure individuals can still exercise their data protection rights – that’s also very important. Keep data protection records up-to-date and ensure any exports of personal information outside the UK are compliant.
• Before introducing employer-led testing like taking temperatures, thermal imaging or other potentially intrusive tests, work out if a data protection impact assessment (DPIA) is required. It will be if the intended processing is ‘high risk’. If it is, then carry out a full DPIA. It will help address the issues systematically and mitigate risks.
• All this demonstrates ‘accountability’ – it shows affected individuals and the ICO that the employer is complying with data protection requirements.

If you need further help, please visit the ICO’s data protection and coronavirus information hub or ask our data protection team.

** Please note that this link is to the ICO’s existing checklists and data sharing code of practice. We will update the link to the ICO’s new checklists after they are published.

You cannot include the following payments in a claim:

• Discretionary bonus or commission payments
• Tips
• Non-cash payments
• Non-monetary benefits including taxable benefits in kind
• Salary sacrifice benefits that reduce an employee’s pay (however HMRC has agreed that such arrangements can be stopped by agreement if due to COVID-19 and the contract is changed)

The updated guidance has confirmed that all of the grant claimed should be paid to the employee in the form of money and that none of the grant is to the used to pay for the provision of benefits or a salary sacrifice scheme.

The CMA is the government body that is responsible for protecting consumers from unfair trading practices. It has announced programme of work to investigate reports of businesses failing to respect cancellation rights during the Coronavirus pandemic.

Based on the complaints received by them from consumers, the CMA has identified three sectors of particular concern:

• Weddings and private events
• Holiday accommodation
• Nurseries and childcare providers

The CMA has expressed concern about the number of complaints that it has received about businesses seeking to retain deposits for cancelled events, undue restrictions being placed on use of vouchers provided for cancelled bookings, and payments being demanded to hold open nursery places.

The CMA has said it will prioritise investigation of these sectors, and then move on to other sectors.

If changed circumstances mean that a business wants to exit from a contractual arrangement, then before trying to terminate it, a careful review should be carried out to see whether a right to terminate actually exists. For example:

• Not every contract for the sale of goods contains the right for the buyer to terminate in circumstances where the supplier hasn’t done anything wrong. If a business has entered into a contract on the supplier’s standard terms, it is unlikely to contain any such provision
• A contract for the provision of services is unlikely, if drafted by the customer, to contain a provision that allows the supplier to walk away from the arrangement at short notice, or perhaps at all

If a party tries to terminate a contract when it doesn’t have the right to do so, the other party will likely claim breach of contract and could sue for damages. In the case of a long term or high-value contract, this could amount to a very significant liability.

Even if the right to terminate the contract does exist, there might be particular rules about the following:

• How much notice has to be given
• How such notice has to be served (for example, it might have to be in writing to a particular address)
• When the notice can be served (perhaps on an anniversary of the start of the contract)
• How much a party has to pay if it cancels (for example, for raw materials, for work done to date, or even the whole contract price)

All of these factors must be taken into account, and any contractual processes for termination are followed.

If you sponsor migrants under Tier 2 or Tier 5, you will not be required to report a sponsored employee’s absence if it is linked to coronavirus and you have authorised this absence e.g. they are self-isolating and you have received an online isolation note.

The Home Office has confirmed that sponsors do not need to withdraw sponsorship for affected employees who have been absent from work for more than 4 weeks if they consider these are exceptional circumstances, which would include absences related to coronavirus. It does however remain extremely important to know where your sponsored workers are and to have up to date contact details.