Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

I would like to make a Lasting Power of Attorney. How do I and my Attorney(s) get our signatures witnessed and who can be my Certificate Provider?

As with a Will, your solicitor can take instructions by telephone, Skype or a similar tool. Your solicitor can then post or email the documentation to you. As with Wills, your signature and those of your proposed Attorneys will need to be witnessed, but in this case only by one other person. However, there are specific requirements as to who can witness your signature. The witness must be aged 18 or older and cannot be your Attorney but they can be your Certificate Provider.

Your Certificate Provider must either be someone you have known personally for at least two years or an appropriate professional. However, they must not be your Attorney and they must not be a member of your family or the partner, boyfriend or girlfriend of a member of your family or a business partner or employee of yours.

Also, if you are living in a care home, the Certificate Provider cannot be the owner, manager, director or employee of the home you live in.

Given the current restrictions on movement, if you have regular medical checks you could ask your GP or another medical professional to witness your signature and act as your Certificate Provider when you go to see them or they come to you. Alternatively, if someone you have known for two years or more is dropping off essentials, they could act as a witness and Certificate Provider remembering to retain the necessary distance and protective measures.

Concerning your Attorney(s) you cannot act as their witness. Otherwise, anyone aged 18 or older can act as their witness, including the other Attorney. Ideally, a witness to your or your Attorney’s signatures should not be a family member for the sake of impartiality and to avoid disputes. If necessary they can be.

What can I do if someone refuses to wear PPE for cultural and/or religious observance reasons?

Again, the primary point must be that an open dialogue is held with that individual to understand their concerns and to properly consider the impact that not wearing PPE will have on their abilities to undertake their duties. Consideration must be given as to whether there are any parts of their duties that they can undertake and whether they can remain in their role. Engage with the individual to ensure that you understand their point of view. What other duties can they do if they cannot do fulfil all the duties of their role?

Will councillors still be able to vote if they can’t meet in person?

Local government legislation formerly stipulated that councillors must be physically present to vote and this requirement has already led to the widespread cancellation of Council meetings.  There is a limit to what can be achieved under the chair’s emergency powers and delegation to officers.

The Government has now legislated to allow for remote voting until 7 May 2021. The secondary legislation required was issued in draft on 2 April and has been in force since Saturday 4 April.

The legislation allows for committee meetings to go ahead where members and any members of the public attending remotely can all times “hear (and where possible see) and be heard (and where possible be seen) by the other members in attendance”.

It remains to be seen how many local authorities take up the opportunity to hold a virtual committee meeting. Concern has been expressed that the demographic of local councillors may mean that members have difficulty with the technological mechanisms for holding such meetings. However, the message from the Secretary of State is clear that wherever possible, the planning system should keep moving in these current times.

Are all employees required to stay at home?

No, where employees cannot work from home, and it is safe for them to return to work, they should do so.

Who do you have to inform and consult?

The duty is to inform and consult appropriate representatives of the “affected employees”.

Note that the term “affected employees” means those who may be “affected by the proposed dismissals or who may be affected by measures taken in connection with those dismissals”. The term extends beyond those immediately at risk of dismissal to include those affected by measures associated with the redundancies.

“Appropriate representatives” can be:

  • The Trade Union (if recognised)
  • (For any roles not covered by collective recognition) any existing standing body of elected or appointed employee representatives (if already in place)
  • Employee representatives, who are elected specifically for redundancy consultation