Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

Do I need to do anything extra to safeguard my employee’s mental health during the Covid-19 outbreak?

Homeworking can cause work-related stress and affect people’s mental health and being away from managers and colleagues could make it difficult to get proper supervision and support.

Encourage your employees to keep in touch. Put procedures in place so you can keep in direct contact with home workers and can recognise signs of stress as early as possible. Use group chat and video chat tools imaginatively.

Have an emergency point of contact and share this so people know how to get help if they need it.

People are much more anxious than usual and may be less productive as a result – recognise this and try to be patient.

Can I dismiss an employee if they refuse to have the vaccine?

See above FAQ about whether you can demand that your employee has the vaccine.

Dismissal for failing to follow a reasonable instruction would be a possibility but it should be the last resort.

First you will need to be able to show that you have reasonable grounds for insisting that they have the vaccine. You will then need to demonstrate that you have taken into consideration the reasons why the employee has refused and why they are not considered reasonable. Before taking a decision to dismiss you should look at alternatives such as other duties/other roles.

Can an employee still do training when on Flexible Furlough?

Employees on Flexible Furlough can engage in training during hours which you record your employee as being on furlough, as long as in undertaking the training the employee does not provide services to, or generate revenue for, or on behalf of their organisation or a linked or associated organisation.

Where training is undertaken by furloughed employees during hours which you record your employee as being on furlough, at the request of their employer, they are entitled to be paid at least their appropriate national minimum wage for this time.

What was the eligibility criteria for the Government’s self-employment income support scheme?

You will be eligible if you are a self-employed individual or a member of a partnership and you:

  • have trading profits of up to £50,000
  • earn the majority of your income from self-employment
  • have submitted a Tax Return for 2019
  • have traded in the tax year 2019/20
  • are trading when you apply for a grant, or would be except for Covid-19
  • intend to continue to trade in the tax year 2020/2021
  • have lost trading/partnership profits due to Covid-19

 

BSA 2022 states that RP’s will have greater powers (to encourage residents to provide access and to fulfill their duties). What are these powers and when are they expected?

Residents will be obliged to:

  • Not act in a way that creates a significant risk of a building safety risk materialising
  • Not interfere with building safety equipment in the common parts
  • Comply with an Accountable Person’s request for information in relation to the assessment and management of building safety risks.

The Accountable Person then has powers in relation to these duties, including:

  • Issuing a contravention notice, requiring a resident to pay for replacement or repair of safety equipment which they have interfered with
  • Applying for court orders in certain situations
  • Requesting access at a reasonable time (in writing with at least 48 hours’ notice) to a resident’s property for the purposes of assessing or managing building safety risks, or checking compliance with the resident’s duties as above.

Secondary legislation is still awaited to bring these provisions into force, so the timing is unknown, but it will likely be within the next 12 months in line with the anticipated timetable for the remainder of the Act.