Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

How do I remain compliant and cover any risk?

Data on properties, and people, has never been more important.

Given that compliance is at risk here, such a decision must be made by the Board to ensure good governance. Board approval should be sought and recorded for the approach the organisation is taking.

It is essential that you continue to record your data on compliance and report to your board at all times, and that there is a clear audit trail for issues with access, and if appropriate to the Regulator. Access issues as a result of self-isolation should be readily identifiable.

Operatives need to be provided with the tools to operate in as safe a way as possible:

  • Checklist of questions to ascertain occupant’s current health
  • Protective equipment (masks, gloves, over clothing)

The Gas Safe website is a useful resource for updates: https://www.gassaferegister.co.uk/help-and-advice/covid-19-advice-and-guidance/

Can furloughed workers still continue with union or non-union representation duties?

Yes, they can continue to undertake duties or activities for representative purposes. This includes individual or collective representation of their colleagues. They must not carry out any actual work or generate revenue for their employer or a linked or associated organisation.

What fees will I pay for a loan under CBILS?

Borrowers will not have to pay a guarantee fee. Lenders will pay a fee to access the scheme. The Government will make a Business Interruption Payment to cover the first 12 months of interest payments and any lender-levied fees, allowing smaller businesses to benefit from no upfront cost.

British Business Bank has indicated that following earlier discussions with the banking industry, some lenders indicated that they would not charge arrangement fees or early repayment charges to SMEs borrowing under the scheme. Each business should check the terms of the loans being made to ensure this is the case and what the interest rate and prepayment fees will be following the period in which the Government makes payment of these amounts.  

How should we deal with existing petitions already presented at court prior to 27 April?

You should speak to your advisors. We do not know presently how existing petitions will be dealt with by the Court. We do know that if any winding up order is made (based on a petition presented after 27 April), it could be found to be void and a creditor may face challenges. Even for petitions presented before 27th April, there is a risk that the Court will not be keen to make a winding up order so it is important that you look at the facts of your debt and weigh up all of the factors before deciding how to proceed.

Do all contractors have to be assessed?

Individual contractors who are not operating via an intermediary (eg sole traders) do not need to be assessed under IR35. However, you will always have the risk with those individuals that there is no intermediary – therefore if their tax status is wrong, HMRC are very likely to consider that responsibility for this would fall on the hiring company in any event.