Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

BSA 2022 states that RP’s will have greater powers (to encourage residents to provide access and to fulfill their duties). What are these powers and when are they expected?

Residents will be obliged to:

  • Not act in a way that creates a significant risk of a building safety risk materialising
  • Not interfere with building safety equipment in the common parts
  • Comply with an Accountable Person’s request for information in relation to the assessment and management of building safety risks.

The Accountable Person then has powers in relation to these duties, including:

  • Issuing a contravention notice, requiring a resident to pay for replacement or repair of safety equipment which they have interfered with
  • Applying for court orders in certain situations
  • Requesting access at a reasonable time (in writing with at least 48 hours’ notice) to a resident’s property for the purposes of assessing or managing building safety risks, or checking compliance with the resident’s duties as above.

Secondary legislation is still awaited to bring these provisions into force, so the timing is unknown, but it will likely be within the next 12 months in line with the anticipated timetable for the remainder of the Act.

Would it be appropriate to suspend someone who refuses to restrict their duties?

Suspension should always be a last resort and not a knee jerk reaction. We would not advise suspension unless a the above steps around the risk assessment have been undertaken. Depending on your local policies, suspension could then be an option on the basis that their health and safety and the health and safety of others are put at risk by their actions.

Reductions in working hours

Another obvious cost cutting measure is to reduce working hours, either temporarily or permanently. Again, it should be done fairly, either across the board or by selecting teams/individuals based on objective business reasons. Imposing without agreement would create significant risk, therefore would require fair selection and consultation.

Can I ask for relief from KPIs or service credits under a contract with a public sector body if the Covid-19 outbreak means that I am having difficulty in performing it?

The Cabinet Office has published a useful Procurement Policy Note (“PPN”) on relief available to suppliers due to Covid-19 (available here). In brief, you should not be penalised by a public sector body, if, in the current circumstances, you are unable to comply (fully or partly) with your contractual obligations. Public sector bodies are expected to work with suppliers and, if appropriate, provide relief against current contractual terms. This is in order to maintain business and service continuity and avoid claims being accepted for other forms of contractual relief, such as the occurrence of a force majeure event.

The types of relief that may be available to suppliers to the public sector will depend on the existing contracts in place. Some contracts may have a payments by result mechanism, whereas others may be based on certain key performance indicators (KPIs) being met. Other contracts may not include any such mechanisms and therefore it will be a matter for discussion between suppliers and the public sector body.

The PPN provides that, rather than a supplier seeking to invoke a clause that would permit the supplier to suspend performance of its obligations (such as a force majeure clause), public sector bodies should first work with the supplier to amend or vary the contract. Any changes should be limited to the particular circumstances and considered on a case-by-case basis. Changes could include:

  • Amending the contract requirements
  • Varying timings of deliveries
  • Relaxing KPIs or service levels
  • Extending time for performance (e.g. revising a contract delivery plan), and/or
  • Preventing the public sector from exercising any rights or remedies against the supplier for non-performance (e.g. liquidated damages or termination rights).

These should only be temporary variations and the contract should return to the original terms once the impact of the Covid-19 outbreak on the contract has ended. Discussions with the public sector body about any changes that are agreed should be documented, in a variation signed by both parties.

A public sector may also need to take account of regulation 72 of the Public Contract Regulations 2015, to ensure that any changes to a contract (even of a temporary nature) do not trigger a requirement to conduct a new tender process. Whilst this may be unlikely to be the case with temporary variations, suppliers should still bear this in mind when discussing any changes to a contract with a public sector body.

If you are a supplier to a public sector body and you are currently struggling to meet your contractual obligations, we recommend that you take legal advice as to whether it might be possible to take advantage of the flexible approach that the PPN requires public sector bodies to adopt – it could be that you can avoid service credits or other financial deductions, or the need to serve formal notices such as “force majeure” or other relief notices.

 

 

What are the new rules about wearing face masks in the workplace?

The new rules for wearing face masks/face coverings in the workplace introduced on 23 September 2020 are as follows:

  • Staff in retail, including shops, supermarkets and shopping centres, will now have to wear a face covering
  • Staff in hospitality will now have to wear a face covering
  • Guidance stating that face coverings and visors should be worn in close contact services, such as hairdressers and beauticians, will now become law
  • Staff working on public transport and taxi drivers will continue to be advised to wear face coverings

You can take off your mask if:

  • You who need to eat, drink, or take medication
  • A police officer or other official asks you to