What are the data protection implications of holding Covid-19 health data?

If such testing is regarded as a “reasonably practicable step” which has been identified as an appropriate control following a risk assessment then it is something you can do.

Although you can’t physically force someone to have something intrusive done, this is very likely to be a reasonable management instruction and therefore if someone refuses to have this done as a condition of entry into the work place then disciplinary action may follow.

Where this is something that is required of employees, employers should be letting their staff know that this is one of a number of measures that are being introduced into the workplace for their own safety. If the employer can explain, in advance of the return, why temperature checks need to be taken, what the consequences of the results will be- i.e. will they be sent home if over a certain temperature, whether this data will be stored (and if the sole purpose is to determine whether or not they are fit to attend work on a particular day then why are they being stored), and the fact that temperature checks are a requirement of entry to company premises for everyone, then there shouldn’t be significant resistance to this measure.

Large scale temperature checks have in some businesses become part of the “new normal” working environment.

The basics of health and safety law requires that employers take “all reasonably practicable steps” to ensure workers’ safety and that a suitable and sufficient assessment of risk is undertaken. It is the individual assessment of Covid-19 risk in each workplace that will be central. Employers will be required to conduct a robust risk assessment and then, following the hierarchy of controls, put robust processes and safeguards in place to address those risks.

UK government guidance and HSE advice is continually evolving, which in practice means that any risk assessment will need to be reviewed very regularly as that guidance develops. There is flexibility for individual businesses within the overall government framework and there will need to be a process of evaluation to ensure that the measures in place continue to meet the requirements.

The starting point of avoid, eliminate and control means looking at individuals continuing to work from home where possible (the fewer the number of people back in the workplace the lower the risk), and if not look at risk management, which leads to administrative controls – i.e. changing work practices before ending up at PPE. PPE is generally seen as control of last resort but in practice – facemasks, disposable gloves and constant prompts to wash hands for example.

In terms of changing working practices, employers should be thinking about:

• the workspace and how this is laid layout
• how do we make sure it is kept clean and hygienic
• how do we keep people apart
• how can we use toilets, canteens or other shared spaces/facilities safely
• how do we promote and enable higher levels of workplace hygiene
• if we are going to rely on PPE – can we get it, and is it suitable
• what about limiting customer interactions
• will there be enough first aiders on site
• can we manage fire safety, deliveries etc
• what about higher risk workers
• should work tools and equipment be allocated on an individual basis to employees.

These decisions need to be recorded and clearly communicated to staff members.

If you are separated from your child’s other parent, government guidance about self-isolation and social distancing may have an impact on the contact arrangements that are in place and give rise to disagreements about spending time with the other parent, travelling arrangements and whether the child should continue to go to school, where one of the parents is a key worker and a school place is available.

The government has issued guidance which makes it clear that where parents do not live in the same household, children under the age of 18 can be moved between their parents’ homes.

Cafcass has also issued guidance which states that, “unless there are justified medical/self-isolation issues – or some future nationally issued guidance or expectation associated with leaving the house in your area – children should maintain their usual routine of spending time with each of their parents. If there is a Child Arrangements Order in place this should be complied with unless to do so would put your child, or others, at risk”.  The guidance from Cafcass be accessed here.  https://mcusercontent.com/2750134472ba930f1bc0fddcd/files/987e77d6-0827-470c-9447-acc61404f465/CAFCASS_Covid19_advice_for_familes_20.pdf

Conduct risk assessments! Your RA must cover every foreseeable risk arising from a return to the workplace, including the impact of reduced staff levels and any operational/administrative changes necessary to ensure social distancing.

Appropriate steps should be taken to manage and mitigate identified risks. Where this is not possible, businesses need to decide whether certain activities are necessary for the business to operate or if they can be temporarily put on hold.
Keep a close eye on the comprehensive Government guidance: https://www.gov.uk/guidance/working-safely-during-coronavirus-covid-19

In particular focus on social distancing and workplace health measures. This guidance will evolve over time and you will need to be sure that your organisation is sticking to it AND reviewing and updating its risk assessment.

In most circumstances the answer will be no. It would be an infringement of their human rights. It could also be a criminal assault.

However where there is a high risk to employees of exposure to COVID-19, such as care homes and healthcare environments, you might be able to make it a requirement of their role to have the vaccine.

First, consider whether you need to have a blanket requirement covering all employees or whether only certain groups who work in the most high risk areas require the vaccine.

You will need to do a thorough risk assessment balancing the amount that the risk of exposure would be reduced against the interference with the employee’s human rights. Consideration will need to be given as to whether insisting on the vaccine is proportionate to the risk and whether other less invasive steps could be taken instead, such as maintaining social distancing, wearing a mask, washing hands.

Any requirement for employees to be vaccinated should be communicated clearly to employees and trade unions together with a clear explanation for why it is necessary.