Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

What actions and measures should be avoided?

The CMA is particularly concerned about certain activities, its guidance highlights:

  • Exchange of commercially sensitive information where this is not necessary in response to the crisis
  • Collaboration which unfairly excludes third parties
  • Abuse of a dominant position (including a dominant position held as a result of the crisis) – particularly to charge excessive prices
  • Seeking to maintain prices or prevent reductions in prices
  • Cooperation going beyond what is necessary to respond to the crisis in the interests of consumers
What is available to stop creditors taking action against the company to recover debts during the current crisis?

The government has announced a number of measures to try to protect businesses during the current period of uncertainty. However there is no outright ban on creditors being able to take legal action to recover money they are owed, though there are temporary restrictions on some forms of legal action, like winding up petitions.

However, it is important to note that these measures only relate to winding up proceedings. Creditors will still be free to commence county court claims.

The new Corporate Insolvency and Governance Act 2020 brings in a new “moratorium” procedure. Businesses in financial difficulty that are viable and can be rescued will now be able to work with an insolvency practitioner to obtain at least 20 business days’ breathing space from creditors to allow the business to formulate a plan to deal with its financial problems.

For more information on the Corporate Insolvency and Governance Act, click here

As part of the raft of measures put forward by the government over recent months, there are also restrictions on landlords taking action to evict commercial tenants who miss rent payments. Various payment holidays and forbearance have been put in place in respect of certain tax liabilities and some business rates.

If your business is going to go into an insolvency process like administration or a company voluntary arrangement, there is the ability to obtain a freeze on creditors taking action whilst those procedures are put in place. However, these sorts of moratoriums will not be available to everyone and in any event not unless an insolvency process is being instigated.

Regardless of whether a business has formal protection from creditors or not, engagement with creditors and trying to reach agreement with them to deal with the debt is therefore vital. Much of the protection measures that the Government has introduced like curbing the ability of landlords to evict a commercial tenant, do not wipe out the debt. They simply prevent action being taken or a payment becoming due for a short time. All businesses should use that time to consider how those debts can be dealt with and engage with the relevant stakeholders sooner rather than later.

One of my employees has contracted Covid-19, should I report it under RIDDOR?

You must only make a report under RIDDOR (The Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013) when:

  • An unintended incident at work has led to someone’s possible or actual exposure to coronavirus. This must be reported as a dangerous occurrence
  • A worker has been diagnosed as having COVID 19 and there is reasonable evidence that it was caused by exposure at work. This must be reported as a case of disease
  • A worker dies as a result of occupational exposure to coronavirus.
Are there any differences in employment status for employment law or for tax purposes?

The key factors for determining status for employment and tax purposes are generally the same. However there are some cases that highlight the different approaches taken by employment tribunals and HMRC when determining status. The important thing to consider for IR35 purposes is that being deemed employed for tax purposes does not mean a contractor is ’employed’. PSC’s can still be used in moving forward but there are likely to be discussions on the commercial aspects of the contractor arrangement. Employment status for tax purposes is likely to come at a cost for both parties.

How does Coronavirus Job Retention Scheme operate?
  • Certain workers will become “furloughed workers”.
  • Furloughed workers cannot carry out any work for their employer while designated as furloughed, or a linked or associated organisation but they can do voluntary work as long as they are not providing services for or generating revenue for the employer or a linked or associated organisation.
  • A furloughed worker can be furloughed part time and work the rest of the time.
  • The furlough period begins when the employee stops work, not when agreement is reached.
  • If furloughed employees are expected to do online training while furloughed they must receive the National Living Wage/National Minimum Wage for the time spent training.
  • Workers must be told of and agree to this change in writing. This written agreement must be kept for five years as part of the scheme. The guidance has confirmed that collective agreement reached between an employer and a trade union on furloughing staff is acceptable for the purposes of making a claim under the scheme.
  • However it should also be noted that this is a change in status and pay (if pay is not being topped up) and therefore subject to the usual employment law rules on changing terms and conditions.
  • Changes to the contract must be made by agreement with the worker and the government guidance is clear that to be eligible for the subsidy employers must document their communication with the employee on being furloughed.
  • You must confirm in writing that an employee has been furloughed, but that the employee does not need to provide a written response. Please note that this is for the purposes of making a claim under the scheme. Any reduction in pay must be agreed in writing under normal employment law principles and failure to do so may result in Employment Tribunal claims. You should not rely on a term in the employment contract to effect this change. We can advise you on how to document this properly.
  • Employers must also keep a record of the agreement for at least 5 years.
  • If employers have collective bargaining arrangements in place, they must agree this change with the union in the usual way.
  • Collective consultation obligations may be triggered if there are 20 or more employees that are proposed to be dismissed and re-engaged in order to effect the change to terms to be furloughed. You should take advice if you think this may apply.