Skip to content
Menu

Home › FAQs › What are the data protection implications of holding Covid-19 health data?

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

What impact does the Regulations have in respect of matters which arise from Fire Safety Audits - e.g. if balconies with wooden/decking elements are now considered higher risk and whether that would fall to developer to remedy the materials used to construct balconies?
The duty would fall on the owner of the building to control the hazards presented by balconies made from combustible materials. There may be scope (via warranties/indemnities or other terms) arising from the contract between the developer and owner for the owner to seek to recover the cost of remedial works.

Last updated on 13th October, 2022

Can you require an employee to tell their employer whether they have been tested for coronavirus/the results of that test?

Yes, this is very likely to amount to a reasonable management instruction which is put in place for public health reasons. Employers should make it clear to their employees that this is something they are required to do and that if they fail to do so this may lead to disciplinary action.

Last updated on 23rd June, 2020

What is the difference between individual and collective consultation?

Where it is envisaged that 20 or more employees will be dismissed at a relevant establishment within a 90 day period or less, then collective consultation is required (in addition to individual consultation) and the company must inform BEIS (using form HR1).

If there are less than 20 dismissals then you are only required to carry out individual consultation.

Last updated on 7th May, 2020

VIDEO EXPLAINER: Consultation exercises – the why, the who, and the how

This free Getting back to business webinar was held on Thursday 7th May.

On this video, employment partner Edward Nuttman and Graham Vials went through what a consultation exercise is and when you are required to hold one. They then took you step by step through the process, describing all you will need to do to ensure legal compliance whilst at the same time being sensitive to the emotional and motivational impact on your employees and managers.

Last updated on 1st May, 2020

How does COVID-19 affect Right to Work checks?

All employers have a duty to prevent illegal working, and carrying out proper Right to Work checks are a fundamental part of this. In light of Covid-19, the Home Office has brought in some temporary measures for employers to use to carry out the requisite Right to Work checks. Failure to follow these could lead to enforcement action and penalties.

Last updated on 15th May, 2020