Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

Who decides on carrying-over holiday entitlement?

The Regulations do not require any prior agreement between an employer and employee that it was not reasonably practicable for holiday to be taken for it to be carried over.

However, if an employee requests holiday then an employer must have ‘good reason’ for refusing it due to coronavirus. The term ‘good reason’ is not defined so the Government will expect employers, employees and (if necessary on any dispute) the Courts to apply common sense.

The Regulations are not confined to key workers so could, in principle, be used by employers for a wider range of employees.

The Government guidance suggests that the following factors should be taken into account when considering whether it was reasonably practicable to take the leave in the relevant year:

  • Whether the business has faced a significant increase in demand due to COVID-19 that would reasonably require the worker to continue to be at work and cannot be met through alternative practical measures.
  • The extent to which the business’ workforce is disrupted by COVID-19 and the practical options available to the business to provide temporary cover of essential activities.
  • The health of the worker and how soon they need to take a period of rest and relaxation.
  • The length of time remaining in the worker’s leave year.
  • The extent to which the worker taking leave would impact on wider society’s response to, and recovery from, the effects of COVID-19.
  • The ability of the remainder of the available workforce to provide cover for the worker going on leave.
Is it possible to apply for a grant of probate at the moment?

Yes. The system for Probate Applications has moved on-line and continues to be available as well as by post. However, if you need to complete an Inheritance Tax Return IHT400 you are likely to experience problems collating information due to delays in many organisations being able to provide you with current values while their offices are closed and staff working remotely. Property valuations will be particularly problematic where surveyors or valuers are unable to attend properties to undertake non-urgent work. If you cannot wait, you must use your best endeavours to be as accurate as possible as regards the information you provide in the IHT400 and follow up by providing HMRC with actual values as soon as you can do so. HM Courts and Tribunal Service is however warning that delays can be expected at this time.

Should my apprentice continue their training during the coronavirus outbreak, even if they’re furloughed?

The Government maintains that apprenticeships will be an important part in the economic recovery post-lockdown and therefore ESFA is encouraging training under apprenticeships to continue, even where an apprentice is furloughed, provided that the training does not provide services to or generate income for their employer. E-learning is being encouraged as a method of delivery.

How do I remain compliant and cover any risk?

Data on properties, and people, has never been more important.

Given that compliance is at risk here, such a decision must be made by the Board to ensure good governance. Board approval should be sought and recorded for the approach the organisation is taking.

It is essential that you continue to record your data on compliance and report to your board at all times, and that there is a clear audit trail for issues with access, and if appropriate to the Regulator. Access issues as a result of self-isolation should be readily identifiable.

Operatives need to be provided with the tools to operate in as safe a way as possible:

  • Checklist of questions to ascertain occupant’s current health
  • Protective equipment (masks, gloves, over clothing)

The Gas Safe website is a useful resource for updates: https://www.gassaferegister.co.uk/help-and-advice/covid-19-advice-and-guidance/

Capability issues

All organisations have underperformers. Capability is a potentially fair reason to dismiss and is separate to any redundancy procedures.

Generally, capability falls into either absences through illness or underperformance in the role. Those who are absent through sickness can be furloughed, but when furlough comes to an end they will need to go back onto sickness. If you are looking to tackle absence then you need to tackle long term and short term absence in a different way.

Long term absence: You need to establish whether the employee is able to return to work (with or without reasonable adjustments) in the medium term. This requires medical opinion and be careful of disability issues. Reasonable adjustments are likely to be important.

Short term absence: You will need to demonstrate that you have fair absence triggers in place and there is normally be a 3 stage procedure: warning and final warning followed by dismissal on notice. Each stage needs a fair procedure, with written information, a fair hearing and the opportunity to appeal. Be careful of disability issues.

As for underperformance: To tackle this, you will need to have clear SMART objectives in place and evidence of the employee failing to meet these. There would then normally be a 3 stage procedure: warning and final warning followed by dismissal on notice. Each stage needs a fair procedure, with written information, a fair hearing and the opportunity to appeal.