What are the data protection implications of holding Covid-19 health data?
The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/
Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.
You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.
Related FAQs
Homeworking can cause work-related stress and affect people’s mental health and being away from managers and colleagues could make it difficult to get proper supervision and support.
Encourage your employees to keep in touch. Put procedures in place so you can keep in direct contact with home workers and can recognise signs of stress as early as possible. Use group chat and video chat tools imaginatively.
Have an emergency point of contact and share this so people know how to get help if they need it.
People are much more anxious than usual and may be less productive as a result – recognise this and try to be patient.
See above FAQ about whether you can demand that your employee has the vaccine.
Dismissal for failing to follow a reasonable instruction would be a possibility but it should be the last resort.
First you will need to be able to show that you have reasonable grounds for insisting that they have the vaccine. You will then need to demonstrate that you have taken into consideration the reasons why the employee has refused and why they are not considered reasonable. Before taking a decision to dismiss you should look at alternatives such as other duties/other roles.
This is critical. The guidance remains clear – IF YOU CAN WORK FROM HOME YOU SHOULD CONTINUE TO DO SO. Bringing people back into work unnecessarily is a big mistake.
Think about how many employees should physically return to the workplace – the fewer the people on site, the lower the risk AND the less pressure on public transport.
Employers will need to be very careful to recognise workers in vulnerable groups or who develop or live in a household with someone who develops symptoms of Covid-19 – again, look at government guidelines. You should understand that this will mean a higher number of staff absences and consider how this might be managed.
Look to keep smaller teams of workers together, minimise physical meetings and if you MUST have them, keep them short and under 15 minutes. Be imaginative – use online platforms like Teams and Zoom wherever you can.
There is not currently a requirement for MHFAs to be DBS checked.
We have developed a toolkit to assist with compliance. The Toolkit contains a specimen contract; detailed guidance; step by step guides and flowcharts; details of the factors to take into account for the status determination test; procedures for challenging the determination; and standard letters for the process. Click here to fill in a form and register your interest in the Toolkit, which contains:
- Detailed guidance in the form of Key Facts
- Employment status checklist
- Employment status assessment flowchart
- Status questionnaire and guidance
- Letter confirming self-employed status (agency)
- Letter confirming employed status (agency)
- Letter confirming self-employed status (direct with PSC)
- Letter confirming employed status (direct with PSC)
- Status disagreement process guidance
- Status disagreement process flowchart
- Letter confirming outcome of status disagreement process
- Consultancy agreement