What are the data protection implications of holding Covid-19 health data?
The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/
Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.
You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.
Related FAQs
On 7 May the Government published guidance on how contracting parties can act responsibly in order to assist the effort to deal with Covid-19. The guidance seeks to persuade contracting parties to act reasonably and recognise the impact of Covid-19 on contractual counterparties. This will continue to be relevant as business begins to emerge from lockdown.
As mentioned earlier, if an agency is involved you must send them a copy of the status determination statement for each contractor, and they will also have the right to dispute the outcome.
If the agency pays the contractor, they will be responsible for the operation of PAYE and NIC’s deductions and any apprenticeship levy. The agency may try to recover these costs from the end user client.
If workers are supplied by an agency or umbrella company and are already treated as employees by the agency, they will remain unaffected by IR35.
Physical bundles may not be regarded as safe for public health and there are obvious difficulties in providing them with the current restrictions in place. Electronic bundles should be provided in PDF format, preferably paginated, indexed and bookmarked. The bundles should only contain documents and authorities that are essential to the issues required to be decided at the remote hearing and should be filed with the court by email.
The Chancellor has announced that all retail and hospitality firms will be exempt from paying business rates for 12 months in a bid to combat the financial damage caused by the outbreak.
This covers pubs, restaurants and shops. After initially covering businesses with a rateable value of less than £51,000, this has now been extended to cover firms of any size, “irrespective of rateable value.”
Smaller businesses have also been offered the option of a £25,000 grant to cope with the impact of coronavirus.
Since the announcement, the Government has also introduced a wide-ranging package of targeted measures to provide financial support to businesses during the coronavirus crisis.
Details of your MHFAs should be posted somewhere that everyone can access easily – a specific area on an intranet or whatever alternative exists. Regular comms involving the MHFAs, webinar sessions, Q&A sessions and mental wellbeing drop in sessions are all ideas that may work well.