Skip to content
Menu

Home › FAQs › What are the data protection implications of holding Covid-19 health data?

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

Is my business covered by insurance for notifiable diseases?

Unfortunately, losses caused by pandemics are not often covered expressly under standard policies, as the risk has been difficult for insurers to price and understand.

Even where additional cover in respect of notifiable diseases has been purchased, it typically will not include Covid-19 within the range of diseases covered by the policy. If the policy includes a list of notifiable diseases, and which does not include Covid-19, it is very unlikely that cover will be available for pandemic-relates losses.

The most common types of covers that could be afforded by insurance policies for coronavirus-related losses and liabilities are traditional business interruption insurance, contingent business interruption insurance, liability insurance, as well as cancellation and abandonment insurance.

Last updated on 27th April, 2021

What is the guidance in relation to the Mental Capacity Act 2005 and Deprivation of Liberty Safeguards during the Covid-19 pandemic?

The Department of Health & Social Care has published guidance for hospitals, care homes and supervisory bodies on the Mental Capacity Act 2005 (MCA) and Deprivation of Liberty Safeguards (DoLS) during the coronavirus pandemic.

In many scenarios created or affected by the pandemic, decision makers in hospitals and care homes will need to decide:

  • if new arrangements constitute a ‘deprivation of liberty’ (most will not), and
  • if the new measures do amount to a deprivation of liberty, whether a new DoLS authorisation will be required (in most cases it will not be).

If a new authorisation is required, decision makers should follow their usual DoLS processes, including those for urgent authorisations.

A summary of the key points to be taken from the guidance is outlined below:

Use of the MCA and DoLS due to Covid-19

  • During the pandemic, the principles of the MCA and the safeguards provided by DoLS still apply.
  • It may be necessary to change the usual care and treatment arrangements, for example to provide treatment for people with Covid-19, to move them to a new hospital or care home to better utilise resources or to protect them from becoming infected.
  • All decision makers are responsible for implementing the emergency Government health advice  and any decision made under the MCA must be made in relation to a particular individual, it cannot be made in relation to groups of people.

Best interest decisions

  • In many cases, a best interests decision will be sufficient to provide the necessary care and treatment for a person who lacks the capacity to consent to the care and/or treatment arrangements during this emergency period.
  • If an individual has made a valid and applicable advance decision to refuse the treatment in question, then the relevant treatment, even for Covid-19, cannot be provided.

Delivering life-saving treatment

  • Where life-saving treatment is being provided in care homes or hospitals, including for the treatment of Covid-19, then the person will not be deprived of liberty as long as the treatment is the same as would normally be given to any person without a mental disorder.
  • The DoLS will therefore not apply to the vast majority of patients who need life-saving treatment who lack the mental capacity to consent to that treatment, including treatment to prevent the deterioration of a person with Covid-19.

The full guidance can be found here.

Last updated on 14th April, 2020

What is the current guidance relating to Private Finance Initiatives and PF2 Projects in light of coronavirus?

On 2 April 2020, the Government issued guidance relating to Private Finance Initiatives and PF2 Projects. The guidance, which is to be enforced with immediate effect (currently due to stay in place until 30 June 2020), is one of several guidance notes issued to date.

A link to the guidance is set out below:

https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/877804/2020_04_01_PFI_and_COVID19_final.docx.pdf

Key messages to contracting authorities

  • PFI contractors should very much consider themselves as being part of the public sector response to the current pandemic
  • Covid-19 is not regarded as, and is not to be classified as a force majeure event
  • PFI contractors must ensure that contingency plans are up to date and have been reviewed and discussed with contracting authorities to enable the continuity of full services to respond to the pandemic and maintain vital public services
  • Contracting authorities should work closely with PFI contractors to use all available options to maintain public services during the emergency period
  • Local arrangements should be made where PFI contractors can’t deliver the agreed requirements and performance standards
  • “Best efforts” should be made by all parties for the continuation of service provision

Last updated on 6th April, 2020

What about employees who say they cannot return to work due to childcare issues?

Employers will need to be flexible with employees who are unable to return to work at present due to childcare difficulties. While schools have reopened, a period of isolation may result in employees having to keep children off school/nursery and therefore have childcare issues. Some employees will be able to manage this with their partner and extended family, whereas others will not. Where an employee simply cannot make any other arrangements to care for their children in the short term then they will be unable to return to work until that situation changes. Any dismissals on the basis that someone is unable to return to work as a result of lack of childcare are likely to be unfair, at least in the short term where such employees may well be able to demonstrate that they had no options available to them.

Last updated on 6th May, 2020

How are civil hearings being conducted?

The majority of hearings are taking place by video or phone.

Court guidance has been issued on telephone and video hearings during the coronavirus outbreak:

https://www.gov.uk/guidance/hmcts-telephone-and-video-hearings-during-coronavirus-outbreak

Where a Judge orders “teleconferencing”, it will take place using BTMeetMe, or video conferencing using Skype for Business or Cloud Video Platform.

All hearings are subject to the relevant jurisdictional rules and practice directions and usual court etiquette, including wearing appropriate attire and not eating or drinking during a hearing.

Electronic bundles of documents and authorities (if required) need to be prepared, indexed and paginated and sent to the Court well in advance of any hearing.

Last updated on 15th May, 2020