What are the data protection implications of holding Covid-19 health data?
The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/
Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.
You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.
Related FAQs
You will be eligible if you are a self-employed individual or a member of a partnership and you:
- have trading profits of up to £50,000
- earn the majority of your income from self-employment
- have submitted a Tax Return for 2019
- have traded in the tax year 2019/20
- are trading when you apply for a grant, or would be except for Covid-19
- intend to continue to trade in the tax year 2020/2021
- have lost trading/partnership profits due to Covid-19
CMA guidance suggests that it will not take enforcement action in respect of agreements which:
- Are appropriate and necessary to avoid a shortage, or ensure security, of supply
- Are clearly in the public interest
- Contribute to the benefit or wellbeing of consumers
- Deal with critical issues that arise as a result of the Covid-19 pandemic
- Last no longer than is necessary to deal with these critical issues
If you have obtained a Grant of Probate or Grant of Letters of Administration there should be no need to complete an indemnity, merely an account closure form. If however you have not yet obtained a Grant but the bank is willing to release funds then they will generally require an indemnity to be executed. Several banks and building societies including Barclays, Lloyds, HSBC and Santander have signed up to the British Banking Association’s voluntary Bereavement Principles, one of which is to support the bereaved according to their personal needs and work with you to resolve everything as quickly as possible.
If the indemnity requires a solicitor to act as a witness, you should contact the bank to see what they are willing to do to get around the problem, given the current situation.
Some of these can be implemented by you, some need agreement or consultation and some depend on the wording of contracts. We’ll explain more in relation to each option.
The Home Office has provided useful guidance on how to carry out a compliant Right to Work check using the temporary adjustments in place for Covid-19. In summary:
- You will need to ask the job applicant to send you digital copies of their original documents, for example by scan, photo or mobile app.
- Hold a video call with the job applicant and ask them to show their original documents on camera so you can check them against the digital copies you have already received.
- On the date you made the check, record that you have done this by using the following wording “adjusted check undertaken on [insert date] due to Covid-19”. Evidence of right to work checks still need to be held securely either in paper or electronic format.
- You can use the online RTW checking service where the job applicant has Biometric Residence Permit or pre-settled or settled status under the EU Settlement Scheme. You should do this whilst on the video call with the applicant/employee, and you must first obtain their permission to view their details on this scheme.