Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

When does IR35 generally apply?

It would apply if the contractor uses an intermediary to provide their services or labour and they would be deemed to be an employee or office holder for tax purposes if they were hired directly by the end user client rather than via the intermediary PSC. This would of course require an assessment of employment status for tax purposes.

Contractors who are not taxed in the UK and supply their services exclusively from outside of the UK are unaffected.

If IR35 applies, tax and NIC’s should be deducted under PAYE by the PSC. In reality this has not been happening so a major reform of the regime was due to be implemented in April 2020. The changes were postponed by one year and are due to take effect from 6 April 2021.

“Within IR35” means a contractor arrangement is caught by IR35 and the individual should be taxed as an employee.

“Outside IR35” means a contractor arrangement is not caught by IR35 and the contractor status is fine.

Can the apprentice take a break or pause in learning due to coronavirus?

A break or pause in learning can be initiated where the interruption to learning due to Covid-19 is greater than four weeks. This must be reported as a formal break in learning. In such circumstance the funding to the training provider will be suspended for the duration of the break. Previously, the rules only allowed an apprentice to initiate this break in learning but this has been expanded to give employers and training providers the right to initiate this. Training providers should continue with their monthly IRL submissions to the ESFA. During breaks in apprenticeships it is not necessary for the apprentice to comply with the minimum of 20% on the job training requirement but this will resume when the break ends.

How is the Pensions Regulator reacting to the crisis?
  • The Pensions Regulator has published regularly-updated guidance for employers.
  • It will take “a proportionate and risk-based approach towards enforcement decisions … with the aim of supporting both employers and savers”. In other words, the law remains the same, but the Regulator will show restraint in enforcement against breaches.
How do I make arrangements for end point assessments for apprentices?

Arrangements for end point assessments can be modified or rescheduled. End point assessment organisations should engage with External Quality Assurance Providers to agree arrangements for the end point assessments where face-to-face assessments are being modified. Where rescheduling is required due to Covid-19 issues and there is a specified time limit for the ESA post gateway, a further pause of 12 weeks is allowable. This should be recorded by the training provider in the ILR.

How do you support your Mental health first aider (MHFA) team?

We recommend that ongoing support is provided to all MHFA’s beyond completion of the MHFA training. It is necessary to do refresher training (approx. every 3 years) and ideally ongoing ‘continued professional development’ should be provided as well as regular opportunities for debriefing / seeking support. One way of supporting your MHFAs in the workplace is by creating a buddy system amongst the MHFAs. That way the individuals carrying out the role of MHFAs have a support structure in place amongst themselves. All trained MHFAs can also reach out to management to discuss any concerns they have or to seek any further support they need.