Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

What was the purpose of the Chancellor's economic update?

On Wednesday 8 July 2020 as part of a summer ‘mini-budget’, Rishi Sunak delivered the Government’s response to the threat to millions of jobs due to the existing furlough arrangements being wound down from August 2020 until it planned to close at the end of October 2020. In a wide-ranging speech to Parliament, the Chancellor announced a number of schemes to look to protect jobs beyond October 2020, in particular in certain sectors and for those aged 18-24. As the Government releases further information over the coming days and weeks, we will add to these FAQs.

Can I use my Contingent Business Interruption insurance to make a claim?

An extension to the traditional business interruption insurance, “contingent business interruption insurance” often covers areas such as business interruption due to damage to property of a customer or suppliers. Nonetheless, proving loss can be problematic.

Claims for loss of use of the property may be possible as a result of forced business closure due to lockdown.  Accordingly policies should be carefully reviewed to see if cover is available.

What should an employer do when an employee has been told to self-isolate under the coronavirus Test and Trace scheme?
  • Do not require them to work
  • Continue to communicate with and support them
  • Allow them to work from home, is there alternative work for them to do if they can’t do their work from home
  • Offer SSP or allow them to take holiday if they want to.
Should you rely upon Statutory Demands issued after 1 March to present a Winding Up petition?

No. No action need be taken in relation to the demand but we would advise against presentation of a petition based upon any Statutory Demand issued between 1 March 2020 and the end of the restrictions. As you may be aware, with Winding Up there is no requirement to issue a Statutory Demand notice before proceeding so this is unlikely to create too many issues – click here to see whether you should issue petitions on other grounds.

There is nothing to prevent statutory demands being served at this time. However, there may be limited benefit as it cannot form the basis of a future winding up petition.

What options do I have if my employee, who can work from home, is struggling to do so because they have young children at home who need "teaching" and supervision?

This is likely to be a common situation and employers and employees are going to have to take a pragmatic approach. You could enter into a temporary flexible working arrangement perhaps agreeing to vary working hours/days or reducing targets or agree to use some annual leave.

Employees could ask to take a period of unpaid leave, asserting their right to time off to care for a dependant but the lack of pay is likely to be unappealing.

Alternatively employees who are unable to work because they have caring responsibilities as a result of COVID-19, which includes childcare responsibilities, can be furloughed.