Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

What are the NICE protocols around a patient’s ongoing treatment whilst in critical care during the pandemic?
  • Start critical care treatment with a clear plan of how the treatment will address the diagnosis and lead to agreed outcomes.
  • Review critical care treatment regularly and when the patient’s clinical condition changes.
  • Stop critical care treatment when it is no longer considered able to achieve the desired outcomes. Record the decision and the discussion with family, carers and the patient (if possible).
Can I dismiss an employee if they refuse to have the vaccine?

See above FAQ about whether you can demand that your employee has the vaccine.

Dismissal for failing to follow a reasonable instruction would be a possibility but it should be the last resort.

First you will need to be able to show that you have reasonable grounds for insisting that they have the vaccine. You will then need to demonstrate that you have taken into consideration the reasons why the employee has refused and why they are not considered reasonable. Before taking a decision to dismiss you should look at alternatives such as other duties/other roles.

How will normal salary be calculated for those with no normal working hours, such as zero hours workers?

For those with variable pay, if the employee has been employed for a full 12 months before the period claimed for you, can take the higher of:

  • The same month’s earnings in the previous year; or
  • Average monthly earnings from the 2019/20 tax year.

For those who have been employed for less than one year you can use the average of their monthly earnings since they began their employment until the date they were furloughed.

If they have been employed for less than a month, work out a pro rata for their earnings so far, and claim for 80%.

What happens if an apprentice is made redundant?

Where an apprentice is made redundant the training provider should support the apprentice in seeking alternative employment within a 12 week period. ESFA will support this process. Where an apprentice is placed on unpaid leave or the nature of their employment no longer supports their apprenticeship, it should be considered whether a break in learning would be appropriate.

An employer who wishes to make an apprentice redundant should seek advice on the process to be followed for this.

Are there specific examples given?

The guidance gives numerous examples of the types of performance adjustment which parties should consider. For example this includes:

  • Varying deadlines (e.g. for performance or payment)
  • Varying compensation (e.g. to recognise increased costs)
  • Varying the nature of performance (e.g. allowing substitute goods, allowing pert delivery of services)

The guidance also encourages a reasonable approach to enforcement, which might encourage delaying issuing formal proceedings, increased use of mediation or providing more information to the other party than would be volunteered under normal circumstances.