What are the data protection implications of holding Covid-19 health data?
The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/
Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.
You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.
Related FAQs
The Act is intended to facilitate the rescue of businesses that are in financial difficulty by preventing suppliers from invoking certain termination clauses under a supply contract, and therefore maintaining supply of goods and services to the business whilst plans to save the business can be considered.
Supply contracts often contain a clause enabling them to terminate the contract, or take other steps such as requiring payment in advance, in the event that the customer enters an insolvency procedure.
This new Act removes any such contractual right by dis-applying any clause that allows the supplier to terminate the contract, or take any other step, due to the customer entering an insolvency process.
Suppliers are also prevented from demanding payment for pre-insolvency debts owed by the customer as a condition of continued supply.
Additionally, where the supplier had a contractual right to terminate the contract due to an event occurring before the customer went into the insolvency process (whether or not linked to payment issues), the supplier loses this right for the duration of the insolvency process.
On 25th June 2020, the Corporate Insolvency and Governance Act, among other things, introduced new restrictions on suppliers of goods and services to terminate the contract in the event that the customer enters an insolvency process. This has very important consequences for many businesses as it could expose them to greater financial risks.
It is the individual assessment by an organisation of its Covid-19 risk in its workplace that will be central. There may be common features across sites or areas of a site but every workplace will have a different risk profile depending on the service it offers and the workers who deliver those services. No one size fits all.
The context of managing Covid-19 risk is the need to tie in with UK government guidance and HSE advice – which despite being a lot more comprehensive than it was, is not a panacea and will continue to evolve. The difficulty we have with this in the context of the known increased risk to BAME employees from Covid-19 is that our understanding of the risk is, we would suggest, at a pretty early stage which makes it more difficult to address. However we know the increased risk exists and we owe our BAME workers a duty to manage that risk and keep them safe.
We also have a duty to consult employees. This is critical in managing this risk – ensuring BAME workers have a loud voice in the assessment process will be very important.
Where an individual has a particular characteristic, for instance they’re pregnant, they have physical or mental disabilities etc, the law requires us to look at that individual or, where it is a group, that group of individuals and assess the risk to them and take any reasonably practicable steps to control the risk to them.
Risk control hierarchy is key. In “normal” businesses we reduce our Covid-19 risk by keeping people away from the workplace – “avoid, eliminate and substitute” then changing work practices (e.g. social distancing measures) before we arrive at PPE. In a healthcare context, we arrive at PPE a lot more quickly.
We need to ensure our people are given sufficient information, instruction and training so they can do their jobs safely and we must consult workers and involve them in workplace safety – this is going to be critical in the context of Covid-19.
Ward Hadaway in conversation with Begbies Traynor webinar was recorded on Tuesday 16th June.
The business spotlight is firmly on Directors. Difficult, sometimes drastic decisions need to be made in unprecedented times. But the consequences of those decisions have long shadows, and Directors need to consider their future position through the lens of their creditors, shareholders, funders, HMRC and even the courts.
In conversation with leading business rescue and recovery specialists, Begbies Traynor, we focused on the proactive approach Directors can take in these exceptionally challenging times. We discussed very practical advice about the quickest routes to funding, how to bolster cash flow, protecting the Board, and ultimately how to be proactive and in control of the process if you think there is no way back for your business as a result of the pandemic.
It is important to note that the changes to insolvency law currently before parliament only deal with wrongful trading – all other duties remain the same. So Directors must still ensure they are acting in the best interests of the company, its shareholders and creditors. In this context, the webinar discussed funding options for keeping a business solvent, and how to manage the process if this is not possible.
Ward Hadaway partner Emma Digby talked to fellow partner and insolvency specialist Jane Garvin and Kris Wigfield and Matthew Cluer from Begbies Traynor about these issues.
This webinar is the first of our Yorkshire “In conversations with…” where we explore with other experts how businesses can get on the front foot in #gettingbacktobusiness.
Small suppliers (defined by reference to certain financial indicators) are temporarily exempt from these new restrictions until 30th March 2021 in order to account for the difficulties to small suppliers during the Covid-19 pandemic.
There are also certain industries that are exempt from these restrictions (for example financial services). The Secretary of State may also create further exemptions framed by reference to kinds of company, supplier, contract, goods or services or in any other way.