Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

Do you have to collectively consult for the minimum period of time before you can issue notice?

These periods are often mistakenly referred to as minimum lengths of consultation (especially by Trade Unions). That is not correct. Consultation can commence, conclude and notices of dismissal be issued within the 30 and 45 day periods. The expiry of the notice would just have to be outside of those restricted periods.

Flexible working

Many employees require flexible working now more than ever. That could be reduced hours, working from home, reduced days, etc. Be careful to act fairly when considering these requests as they can be a discrimination claim in the waiting.

A flexible working request is a request for a permanent change to the contract of employment however to encourage a greater take up during this difficult time, you can agree this on a temporary basis.

What happens if an employee refuses to attend work because they are afraid of being exposed to COVID-19 particularly the new more transmissible strain?

An employee can refuse to attend work but their refusal to do so will have to be based on a reasonable belief that their health and safety is in danger.  Whether or not their refusal is reasonable will take into consideration factors such as the employee’s own health and whether they are at a higher risk of becoming seriously ill if they contract Covid-19 and the steps their employer has out in place to mitigate the danger of contracting Covid-19 at work.

In such circumstances where the employee’s belief is deemed to be reasonable, they will be entitled to stay at home and receive full pay.

If an employee is subsequently dismissed for refusing to attend work in these circumstances, they may be able to bring a claim for unfair dismissal.

My business involves providing services to consumers. What are my legal obligations in relation to deposits paid by consumers for services that I have been unable to perform due to government restrictions?

Many businesses that supply directly to consumers have been concerned to understand their legal position in relation to services that have been cancelled, or that they have been unable to perform, because of the Covid-19 pandemic, and in particular how to deal with deposits paid by consumers for such services. With some degree of restriction on the hospitality and tourism sectors likely to remain in place for some time, such questions will remain important for the foreseeable future.

Can employees on fixed-term contracts be furloughed?

Yes. Their contracts can be renewed or extended during the furlough period without breaking the terms of the scheme.

If the employee’s contract has not already expired, the contract can be extended or renewed. The employee may be furloughed provided that they were employed on or before 30 October 2020. You must also have made a RTI submission to HMRC between 20 March 2020 and 30 October 2020.

If the employee’s contract expired on or after 23 September 2020, the employee can be re-employed and furloughed. Please note that the employee must have been employed by you on 23 September 2020 and you must have made a RTI submission to HMRC between 20 March 2020 and 30 October 2020.