Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

If, after deploying all control measures the risk is still deemed too great for employees to work safely, then what should employers do?

The law says that if after assessing a risk and considering all the control measures available to you, you cannot undertake a task safely – then you should not undertake the task.

If that means taking BAME workers out of higher risk frontline work, that is what will have to be done.

Beware of workers saying “we’ll accept the risk” – it does not protect you against regulatory/enforcement action or civil claims.

Do I need to treat everyone the same and bring them all back at the same time?

No. You should always treat employees consistently and fairly, but this doesn’t mean treating them all the same, or applying the same requirements. For those employees who have been homeworking and doing so without any problems, then they should be allowed to continue to do so.

We would anticipate that the vast majority, if not all, businesses will be approaching the return on a phased basis, which inevitably means some employees returning to work sooner than others. In reality then, you aren’t treating everyone the same, but try to be fair and consistent; you need to do what works best from a business perspective, but can you rotate people, require them to come in at different times etc. Where people perceive that the planned return is being worked out fairly they are far more likely to buy into this, which will help avoid resentments building up between colleagues.

Are Public Bodies able to continue to pay contractors (and their supply chains) at risk as a result of Covid-19?

Yes: The Cabinet Office has published a number of Procurement Policy Notes to provide instructions to Public Bodies to enable payments to continue to be made to at risk suppliers (and their supply chains) who have been affected by Covid-19. Copies of this guidance can be obtained from the Government website at: https://www.gov.uk/government/publications/procurement-policy-note-0220-supplier-relief-due-to-covid-19

What if you want to terminate the contract completely?

If changed circumstances mean that a business wants to exit from a contractual arrangement, then before trying to terminate it, a careful review should be carried out to see whether a right to terminate actually exists. For example:

  • Not every contract for the sale of goods contains the right for the buyer to terminate in circumstances where the supplier hasn’t done anything wrong. If a business has entered into a contract on the supplier’s standard terms, it is unlikely to contain any such provision
  • A contract for the provision of services is unlikely, if drafted by the customer, to contain a provision that allows the supplier to walk away from the arrangement at short notice, or perhaps at all

If a party tries to terminate a contract when it doesn’t have the right to do so, the other party will likely claim breach of contract and could sue for damages. In the case of a long term or high-value contract, this could amount to a very significant liability.

Even if the right to terminate the contract does exist, there might be particular rules about the following:

  • How much notice has to be given
  • How such notice has to be served (for example, it might have to be in writing to a particular address)
  • When the notice can be served (perhaps on an anniversary of the start of the contract)
  • How much a party has to pay if it cancels (for example, for raw materials, for work done to date, or even the whole contract price)

All of these factors must be taken into account, and any contractual processes for termination are followed.

Can you place employees who TUPE transfer to you on Flexible Furlough?

A new employer may claim under the scheme in respect of the employees of a previous business transferred after 10 June 2020 as long as:

  • the TUPE or PAYE business succession rules apply to the change in ownership
  • the employees being claimed have previously had a claim submitted for them by their prior employer in relation to a furlough period of at least 3 consecutive weeks taking place any time between 1 March 2020 and 30 June

In these circumstances, the maximum number of employees that the new employer can claim for will be the total of both:

  • the maximum number of employees the new employer claimed for in any one claim ending on or before 30 June
  • the number of employees that are being transferred to the new employer which have had a claim submitted for them in relation to a furlough period of at least 3 consecutive weeks taking place any time between 1 March 2020 and 30 June. This is subject the maximum cap the previous employer was subject to.

A new employer is also eligible to claim under scheme in respect of the employees associated with a transfer of a business after 10 June 2020 from the liquidator of a company in compulsory liquidation where:

  • TUPE would have applied were it not for the company being in compulsory liquidation
  • the employees being claimed for have been furloughed and a had a claim submitted for them by their prior employer in relation to a period of at least 3 consecutive weeks taking place any time between 1 March 2020 and 30 June

In these circumstances, the maximum number of employees that the new employer can claim for will be the total of both:

  • the maximum number of employees the new employer claimed for in any one claim ending on or before 30 June and
  • the number of employees that are being transferred to the new employer which have had a claim submitted for them by their prior employer in relation to a furlough period of at least 3 consecutive weeks taking place any time between 1 March 2020 and 30 June. This is subject to the maximum cap the previous employer was subject to.