What are the data protection implications of holding Covid-19 health data?
The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/
Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.
You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.
Related FAQs
Where it is envisaged that 20 or more employees will be dismissed at a relevant establishment within a 90 day period or less, then collective consultation is required (in addition to individual consultation) and the company must inform BEIS (using form HR1).
If there are less than 20 dismissals then you are only required to carry out individual consultation.
This may be a good idea – whatever name they are given, it is essential that MHFAs are empowered to take a proactive approach to organisational mental health and that they have the bandwidth to be able to discharge their responsibilities. The name should reflect the culture of the organisation, the key aspect is awareness and accessibility – identifying a name for your company that supports this is key.
If such testing is regarded as a “reasonably practicable step” which has been identified as an appropriate control following a risk assessment then it is something you can do.
Although you can’t physically force someone to have something intrusive done, this is very likely to be a reasonable management instruction and therefore if someone refuses to have this done as a condition of entry into the work place then disciplinary action may follow.
Where this is something that is required of employees, employers should be letting their staff know that this is one of a number of measures that are being introduced into the workplace for their own safety. If the employer can explain, in advance of the return, why temperature checks need to be taken, what the consequences of the results will be- i.e. will they be sent home if over a certain temperature, whether this data will be stored (and if the sole purpose is to determine whether or not they are fit to attend work on a particular day then why are they being stored), and the fact that temperature checks are a requirement of entry to company premises for everyone, then there shouldn’t be significant resistance to this measure.
Large scale temperature checks have in some businesses become part of the “new normal” working environment.
Employees are generally permitted to take holidays during furlough. However, Government guidance has been updated to state that “Employees should not be placed on furlough for a period simply because they are on holiday for that period.” If a period of furlough happens to coincide with an employee’s holiday then you should ensure that there are business grounds to support furlough being used in that instance so that it isn’t just being used as a means to fund holiday utilisation.
The duty is to inform and consult appropriate representatives of the “affected employees”.
Note that the term “affected employees” means those who may be “affected by the proposed dismissals or who may be affected by measures taken in connection with those dismissals”. The term extends beyond those immediately at risk of dismissal to include those affected by measures associated with the redundancies.
“Appropriate representatives” can be:
- The Trade Union (if recognised)
- (For any roles not covered by collective recognition) any existing standing body of elected or appointed employee representatives (if already in place)
- Employee representatives, who are elected specifically for redundancy consultation