We are conscious that asking a particular group of people, who have a protected characteristic under the Equality Act 2010, to restrict their duties, could expose the Trust to allegations of discrimination. What steps can we take to avoid someone/a group of people feel that they have been treated differently because of their protected characteristic?
A claim for indirect discrimination is the most likely risk here. The first point to make is that the decision to review duties is being made based on the growing amount of medical evidence that the BAME community is being disproportionately adversely affected by the COVID 19 pandemic compared to other ethnic groups. The key is to ensure that blanket policy decisions are not taken, nor should assumptions be made about the risk to each individual concerned. Decisions should only be made on an individual basis with an open dialogue with the individual concerned. You as their employer, need to ensure that the individual feels listened to and heard; that this is not just a tick box exercise.
Consider having a working group which has an overview of the policy decisions being made. That working group should contain representatives from across the staff groups including staff side, but importantly, representatives from different ethnic backgrounds to ensure the important voices are heard. Accountability should be built into that group. This group should also be a safe environment for staff to raise concerns about their health and safety and safe systems at work.
Related FAQs
The Government has introduced legislation to expand the list of those who can register deaths to include Funeral Directors who are dealing with the funeral arrangements and who has been authorised by a relative of the deceased to register the death. Also, the medical cause of death certificate can be emailed to the Registrar’s office and arrangements made to have a telephone appointment to provide the Registrar with information to register the death. The requirement to attend the Registrar in person to sign the Register has been relaxed so that this is not necessary. It will however still be necessary to register the death within 5 days.
Employers will be collecting and sharing health information. Health information is sensitive and higher data protection standards apply. Here are a few key pointers.
- Update privacy notices to cover the new collection and sharing of employees’ information and provide these to the workforce. Be transparent and fair.
- Identify the legal basis and condition for use of this information and put any required paperwork in place. The ICO guidance will help. For some conditions such as the employment condition, an Appropriate Policy Document (APD) will be required. The ICO has an APD template.
- Only use the information for the purpose of managing the workforce during the pandemic.
- Only collect or share information if it’s necessary – if it’s a targeted and proportionate way of achieving your purpose.
- Make sure any health information collected and shared is accurate – there may be serious consequences if it’s not.
- Work out how long the information must be kept for. Keep a record of that period and act on it at the appropriate time.
- Security is very important – there may be malicious actors trying to trick employers and employees. Make sure employees know how to identify a genuine NHS Test and Trace contact. Keep the information secure. Use the ICO’s data sharing checklists** and keep a record of the disclosures made and why. Control external disclosures – only certain authorised members of staff should make them.
- Make sure individuals can still exercise their data protection rights – that’s also very important. Keep data protection records up-to-date and ensure any exports of personal information outside the UK are compliant.
- Before introducing employer-led testing like taking temperatures, thermal imaging or other potentially intrusive tests, work out if a data protection impact assessment (DPIA) is required. It will be if the intended processing is ‘high risk’. If it is, then carry out a full DPIA. It will help address the issues systematically and mitigate risks.
- All this demonstrates ‘accountability’ – it shows affected individuals and the ICO that the employer is complying with data protection requirements.
If you need further help, please visit the ICO’s data protection and coronavirus information hub or ask our data protection team.
** Please note that this link is to the ICO’s existing checklists and data sharing code of practice. We will update the link to the ICO’s new checklists after they are published.
- Trusts should allow for telephone advice rather than face-to-face review from critical care when clinically appropriate.
- Hospitals should discuss the sharing of resources and the transfer of patients between units, including units in other hospitals, to ensure the best use of critical care within the NHS.
Please note, the above is intended to provide a summary of the key recommendations which emerge from this guidance. Access to the full guidance can be found here.
Privacy policy – You must make sure the relevant privacy policies deal with how you will process Covid-19 data. You should have an employee privacy policy and this may already deal with health data (if it doesn’t, it should). You might also need to look at privacy policies for customers, visitors and suppliers. This ensures that processing is lawful, fair and transparent.
Lawful processing conditions – You will need to consider which processing conditions you are relying on (remembering that you need both an Article 6 condition and an Article 9 condition – this is the part of the GDPR which deals with special category data). As a lot of the data you collect will be about employees, you can’t use consent so you will have to find another lawful reason under GDPR which allows you to process the data.
Appropriate policy document – When you are considering your Article 9 processing conditions, remember you must also have an “appropriate policy document” in place.
Processing record – Finally make sure your processing record is up to date with information on what data you collect and use.
Every company has to file accounts at Companies House every year. If they are filed late, a fine is automatically levied. If there is a long delay in filing them, the directors are at risk of prosecution and the Registrar of Companies might start a process which could ultimately lead to the company being struck from the register.
However, Companies House has recognised that businesses might currently face exceptional problems in preparing and filing their accounts on time and so have posted a notice on their website which says that if immediately before the filing deadline, it becomes apparent that accounts will not be filed on time due to coronavirus, you can make an application to extend the period allowed for filing.