Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

Do I have to continue to pay furloughed staff while furloughed? Can I wait until I receive the money from the government?

To qualify for a grant under the scheme you must pay your furloughed staff the wages you are claiming for. Failure to do so may result in a HMRC investigation and/or claims from furloughed staff for unlawful deductions from wages and possibly constructive dismissal claims.

Normal benefits including non-monetary benefits should continue during furlough unless the individual has agreed in writing to reduce or remove a benefit during this time.

Employers are expected to apply for one or more of the financial support schemes available to be able to continue to pay staff.

If an employee refuses to wear a face mask at work, can I discipline or dismiss them?

In appropriate cases, disciplinary action and then dismissal may be fair if an employee refuses to wear a face covering in the workplace. For example, if this is in breach of the government guidance or if  employer has issued a reasonable management instruction to this effect due to an identified health and safety risk.

It is important that employers use a fair and reasonable procedure when deciding whether to discipline and/or dismiss an employee and that its actions does not unlawfully discriminate against employees who have legitimate reasons for not wearing masks, such as those individuals who have health conditions like asthma.

What is the government guidance on making places of work as safe as possible to return to?

The government has produced a series of industry specific “Covid-19 Secure” guidelines, which employers should follow. These guidelines are designed to keep the risk of infection as low as possible, while allowing as many people as possible to resume their livelihoods.

Will funding audits continue during the coronavirus pandemic?

Funding audits are being paused and no new audits will be commenced during the lockdown period.

Who do the Procurement Policy Notes (PPN) apply to?

All three of the PPNs are effective immediately and apply to the following Contracting Authorities:

  • Central Government Departments
  • Executive agencies
  • Non-departmental public bodies
  • Local authorities
  • NHS bodies
  • The wider public sector

In regards to PPN03/20, those in scope organisations that do not currently use procurement cards are advised to immediately put in place arrangements using the relevant Crown Commercial Service Agreement (Lot 2 of RM3828 Payment Solutions).