What are the data protection implications of holding Covid-19 health data?
The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/
Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.
You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.
Related FAQs
With the exception of the Covid-19 Corporate Financing Facility (see below), there was initially little dedicated financial assistance for medium-sized and larger businesses affected by the coronavirus outbreak (the so-called “stranded middle”); however, from 20 April 2020 such businesses (with a turnover above £45 million) have been able to access finance via the Coronavirus Large Business Interruption Loan Scheme (“CLBILS“).
CLBILS operates in a similar manner to CBILS except that a lender can provide:
- up to £25 million to businesses with turnover from £45 million up to £250 million; and
- up to £50 million to businesses for those with a turnover of over £250 million.
Finance is available in the form of:
- term loans
- revolving credit facilities (including overdrafts)
- invoice finance and
- asset finance,
in each case available on repayment terms of up to three years.
Several changes to CLBILS took effect from 26 May 2020. The maximum amount available through CLBILS to a borrower and its group increased from £50m to £200m. Term loans and revolving credit facilities over £50m will be offered by CLBILS lenders which have secured additional accreditation. The maximum size for invoice finance and asset finance facilities remains at £50m. Companies borrowing more than £50m through CLBILS will be subject to further restrictions on dividend payments, senior pay and share buy-backs during the period of the loan. Further information on the most recent changes, including new provisions on seniority of CLBILS facilities, can be found on the CLBILS page on the British Business Bank website. There is also an in-depth FAQs section for businesses, which has the full details of the changes to the scheme.
Unlike CBILS, the UK government will not make payments to cover the interest and any lender-levied fees in the first 12 months of any facility so these larger businesses will not benefit from the no upfront costs and lower initial repayments that smaller businesses eligible for CBILS benefit from. The other key provisions of CLBILS, such as the eligibility criteria, the 80% government-backed guarantee and security, are similar to those of CBILS.
Eligibility is similar to CBILS and businesses must:
- Be UK-based in its business activity
- Have an annual turnover of more than £45 million
- Have a borrowing proposal which the lender would consider viable, were it not for the current pandemic, and for which the lender believes the provision of finance will enable the business to trade out of any short-term to medium-term difficulty
- Self-certify that it has been adversely impacted by the coronavirus (COVID-19)
- Not have received a facility under the Bank of England’s Covid Corporate Financing Facility.
Businesses from any sector can apply, except the following:
- Credit institutions (falling within the remit of the Bank Recovery and Resolution Directive), insurers and reinsurers (but not insurance brokers)
- Building Societies
- Public-sector bodies
- Further-education establishments, if they are grant-funded
- State-funded primary and secondary schools
All lending decisions remain fully delegated to the accredited lenders.
Another obvious cost cutting measure is to reduce working hours, either temporarily or permanently. Again, it should be done fairly, either across the board or by selecting teams/individuals based on objective business reasons. Imposing without agreement would create significant risk, therefore would require fair selection and consultation.
Some examples of the key questions to ask include:
- Is there still a viable underlying business that is likely to continue beyond the current crisis?
- What does the revised short to medium cash flow look like and will the company continue to be able to pay its liabilities?
- Does the company have the support of all of its stakeholders – lenders, shareholders, customers, suppliers and banks – even though the business might be in breach of its own obligations?
- What measures could (and should) the board put in place to protect creditors, including making sure that exposure to creditors (both collectively and individually) is not increased, assets are not sold at less than value and no creditor is treated more favourably than another?
- Is there still a reasonable prospect of the business avoiding liquidation or administration?
The key question is always whether accepting the money is in the best interests of creditors as a whole bearing in mind that accepting Government support and continuing to trade might increase the company’s overall liabilities. Directors should be mindful that if the business fails, their decisions during this critical time may be scrutinised and it is therefore important that directors have up-to-date financial information and projections to form the basis of any decisions, take stock, get the right advice and document the decisions that are taken.
A reduction in hours or salary or changes to hours or patterns of work is a contractual change – you can’t just impose it without significant risk. The same applies for lay-off or short-time working where there is no existing contractual right to impose these.
In summary, the process that an employer should follow to implement these measures is as follows:
- Communicate the Company’s position clearly and the urgent need to achieve temporary cost-saving to ensure the ongoing financial viability of the organisation
- Explain the proposed changes in detail and seek the employee’s agreement, and
- Record the agreed changes in a letter which is counter-signed by the employee.
If employees will not agree then employers will be at substantial risk of claims for unlawful deduction of wages, breach of contract and/or constructive unfair dismissal if they seek to impose these changes unilaterally. Employers should be mindful that this approach is likely to cause significant employee relations issues and dissatisfaction if only some employees agree to a reduction in pay. Employers should have a clear strategy for what their approach will be if this is the case – for example, they may wish to instead explore a different measure such as redundancies. This may form part of the employer’s communication when explaining the reason for the changes and seeking the employee’s agreement.
Unions: Employers should also be aware that where there is a recognised trade union in respect of any part of the workforce which is being asked to agree to a change to terms and conditions, the recognition agreement or collective agreement will require the employer to consult and/or negotiate with the trade union in the first instance.
Collective consultation: Where 20 or more dismissals are proposed at one establishment in any 90-day period, there are stringent collective consultation rules which apply (regardless of whether the employees have two years’ service or not). All dismissals count towards this total unless the dismissal is “not related to the individual concerned” – therefore dismissals for things such as conduct or capability do not count, but most other dismissals will count. This will include where you are imposing changes to the contract such as reduced hours or pay.
The rules on collective consultation set out a prescriptive and time-consuming process which must be followed, and minimum timescales before any redundancies can take effect. The cost of any claims relating to failure to follow collective consultation requirements are substantial, and specific advice should therefore always be sought before seeking to implement collective redundancies. We will be publishing further guidance on this on the Hub shortly.
The Coronavirus Statutory Sick Pay Rebate Scheme will repay employers the SSP paid to current or former employees and will be available from 26 May 2020. See here.
The scheme covers all types of employment contracts and employers will be eligible to claim if they:
- Are claiming for an employee who is eligible for sick pay due to coronavirus
- Had a payroll scheme that was created and started on or before 28 February 2020
- Had fewer than 250 employees on 28 February 2020
The repayment will cover up to 2 weeks starting from the first qualifying day of sickness, if an employee is unable to work because they either:
- have coronavirus (COVID-19) symptoms
- cannot work because they are self-isolating because someone they live with has symptoms
- are shielding and have a letter from the NHS or a GP telling them to stay at home for at least 12 weeks
- have been notified by the NHS or public health bodies that they’ve come into contact with someone with coronavirus
- they have been notified by the NHS to self-isolate before surgery
You can claim for periods of sickness starting on or after:
- 13 March 2020 – if your employee had coronavirus or the symptoms or is self-isolating because someone they live with has symptoms; or
- 16 April 2020 – if your employee was shielding because of coronavirus.
- 28 May 2020 – if your employee has been notified by the NHS or public health bodies that they’ve come into contact with someone with coronavirus
- 26 August 2020 – if your employee has been notified by the NHS to self-isolate before surgery
Employees do not have to give you a doctor’s fit note for you to make a claim. But you can ask them to give you either:
- an isolation note from NHS 111 – if they are self-isolating and cannot work because of coronavirus
- the NHS or GP letter telling them to stay at home for at least 12 weeks because they’re at high risk of severe illness from coronavirus
- the evidence from the NHS or public health body requiring them to self-isolate
You must keep the following records in relation to a claim you make under the scheme for three years:
- The reason for the employee’s absence
- Details of each period the employee could not work, including start and end dates
- Details of the SSP qualifying days when the employee could not work
- National insurance numbers for each employee you have paid SSP to
You’ll need to print or save your state aid declaration (from your claim summary) and keep this until 31 December 2024.