Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

Do employers still have to enrol and reenrol employees?
  • Yes, and this includes furloughed employees under the Coronavirus Job Retention Scheme.
  • Employers must continue to assess their new employees or newly eligible existing employees and enrol them where required, but can make use of the statutory postponement procedure which allows them to delay for up to three months the assessment of new employees for the purpose of enrolment (see further details here on the Pensions Regulator’s website). Declarations of compliance for new employers must still be completed in the normal way.
  • Postponement cannot be used for re-enrolment. The Regulator recommends employers use the re-enrolment date tool on the Regulator’s website to choose a date up to three months after the third anniversary of enrolment to assess staff for re-enrolment. Further information about employers’ obligations about reenrolment from the Pensions Regulator can be found here. Re-declarations of compliance for new employers must still be completed in the normal way.
Is there going to be any support after October 2020 for employers to try and protect jobs?

The Chancellor announced:

  • A new “job retention bonus” for employers to access for furloughed employees subject to certain conditions being met – see below for more information.
  • A “Kickstart scheme” which will directly pay employers to create jobs for any 16-24 year old at risk of long-term unemployment.
  • Incentives for employers to take on apprentices.

As a result of the CJRS being extended, the Job Retention Bonus will no longer be paid in February 2021.

What other financial resources are available for charities?

Charities can also take advantage of the existing measures the Government has already put in place including deferring their VAT bills, paying no business rates for their shops next year and furloughing staff where possible with the Government paying 80% of their wages under the Coronavirus Job Retention Scheme – see our People and Employment FAQ’s and our Premise and Property FAQ’s.

Can an employee on family related leave be furloughed?

Yes, but your claim will be limited to any enhanced contractual payments you make to employees who qualify for the relevant family related pay.

All maternity and parental rights remain in force for anyone in this category who is furloughed. However you may need to calculate average weekly pay differently if the employee was furloughed and then started family related leave on or after 25 April 2020.

Furlough pay cannot be claimed for the period that an employee is receiving Maternity Allowance. An employee can agree to accept furlough pay but they must contact Jobcentre Plus to stop their Maternity Allowance payments for this period.

What is the Clinical Negligence Scheme for Coronavirus?

The Government has recently passed the Coronavirus Act 2020 in a response to the challenges posed by the pandemic, especially in relation to those facing the NHS during this time of crisis.  NHS Resolution worked closely with the Department for Health and Social Care to draft a clause within the Coronavirus Act providing indemnity for clinical negligence for any coronavirus related activity not currently covered by an existing arrangement.  In order to implement this clause, NHS Resolution has launched the Clinical Negligence Scheme for Coronavirus (“CNSC”).

It is intended that the CNSC will cover new contracts put in place for healthcare arrangements to respond to coronavirus, such as organisations supporting testing arrangements or Independent Contractors making agreements with NHS England and NHS Improvement to release capacity to the NHS.  Membership is not required for this scheme and the contracts entered into will automatically provide indemnity under the scheme.

The CNSC will not replace existing indemnity provisions made under the Clinical Negligence Scheme for Trusts (“CNST”) and it has been confirmed that the new Nightingale Hospitals will be covered by CNST rather than CNSC.  Similarly, NHS Resolution have confirmed that those doctors and nurses returning to practice from retirement, or those joining as students will be covered by the CNST or, where applicable the Clinical Negligence Scheme for General Practice (“CNSGP”).  The CNSC will not cover returning midwives to the profession, but the Royal College of Midwives have confirmed that they will extend all of the benefits of membership including Medical Malpractice Insurance to returning retired midwives.

For more information regarding this please click here.