Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

How is the Court of Protection dealing with matters during the Coronavirus pandemic?

The current situation with the coronavirus pandemic has presented obvious challenges to the effective and fair operation of the Court of Protection (COP). Remote access to the COP has therefore become a necessity to ensure that hearings continue to provide proper access to justice. All parties involved in such cases have a responsibility in achieving this primary aim.

Who is eligible for CBILS?

To be eligible for CBILS, the British Business Bank has confirmed that businesses should be able to answer YES to the following points:

  • Your application must be for business purposes
  • You must be a UK-based SME with an annual turnover of up to £45m. This includes sole traders, freelances, body corporates, limited partnerships and limited liability partnerships. For sole traders to be eligible it is expected that sole traders will need to have a business account with its funders and not be operating via a personal account
  • Your business must generate more than 50% of its turnover from trading activity
  • Your CBILS-backed facility will be used to support primarily trading in the UK
  • You wish to borrow up to a maximum of £5m.

Businesses meeting these criteria from all sectors can apply save for Banks, Building Societies, Insurers and Reinsurers (but not insurance brokers), the public sector including state-funded primary and secondary schools, employer, professional, religious or political membership organisation or trade unions which are not eligible.

Your borrowing proposals must be considered viable by the relevant lender under normal circumstances aside from the Covid-19 outbreak, and the lender believes the provision of finance will enable the business to trade out of any short-to-medium term difficulty. Lending decisions are delegated to the accredited lenders and lenders will need further information to confirm eligibility.

The eligibility criteria for CBILS does not require lenders to take into account other forms of Government support that SME’s may already be benefiting from, most notably business rate relief.

We understand that ownership structure is not taken into account when confirming eligibility and that businesses back by a PE funder or a subsidiary of an overseas entity can be eligible if it meets the other criteria.

An update on eligibility – 3 April 2020

Previously, for facilities above £250,000, the lender must establish a lack or absence of security prior to businesses using the Scheme. The requirement for insufficient collateral has been removed allowing those SMEs who are considered to have sufficient collateral to access the Scheme. We would expect that where security is available, a lender will seek to take security over the relevant assets.

Can employees who are shielding be placed on Flexible Furlough?

Employees who are unable to work because they are shielding in line with public health guidance (or need to stay home with someone who is shielding) can be furloughed after 1 July 2020, as long as you have previously submitted a claim for them in relation to a furlough period of at least 3 consecutive weeks taking place any time between 1 March 2020 and 30 June.

BSA 2022 states that RP’s will have greater powers (to encourage residents to provide access and to fulfill their duties). What are these powers and when are they expected?

Residents will be obliged to:

  • Not act in a way that creates a significant risk of a building safety risk materialising
  • Not interfere with building safety equipment in the common parts
  • Comply with an Accountable Person’s request for information in relation to the assessment and management of building safety risks.

The Accountable Person then has powers in relation to these duties, including:

  • Issuing a contravention notice, requiring a resident to pay for replacement or repair of safety equipment which they have interfered with
  • Applying for court orders in certain situations
  • Requesting access at a reasonable time (in writing with at least 48 hours’ notice) to a resident’s property for the purposes of assessing or managing building safety risks, or checking compliance with the resident’s duties as above.

Secondary legislation is still awaited to bring these provisions into force, so the timing is unknown, but it will likely be within the next 12 months in line with the anticipated timetable for the remainder of the Act.

What was included in the Government’s self-employment income support scheme?
  • A taxable grant worth 80% of the average monthly profit over the last three years (one or two years will be reviewed for those who do not have three years of tax returns)
  • The grant will be capped at £2,500 per month
  • The scheme was initially available for three months and has been extended as necessary
  • Individuals claiming a grant can continue to do business (unlike employees who must not work when furloughed)