Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

What records do I need to keep for Flexible Furlough?

You will need to keep a copy of the written agreement for a period of 5 years. If the hours of work change from that which you initially agree, you are likely to need something new in writing to cover each separate arrangement.

You should also keep records of how many hours your employees work and how many hours they are furloughed (i.e. not working). You must keep these records for 6 years, together with a record of the amount claimed, your claim reference number and your calculations.

What are the new rules about wearing face masks in the workplace?

The new rules for wearing face masks/face coverings in the workplace introduced on 23 September 2020 are as follows:

  • Staff in retail, including shops, supermarkets and shopping centres, will now have to wear a face covering
  • Staff in hospitality will now have to wear a face covering
  • Guidance stating that face coverings and visors should be worn in close contact services, such as hairdressers and beauticians, will now become law
  • Staff working on public transport and taxi drivers will continue to be advised to wear face coverings

You can take off your mask if:

  • You who need to eat, drink, or take medication
  • A police officer or other official asks you to
Retraining and redeploying

If the business has areas requiring an increased workforce whilst others require a reduced workforce, staff can be retrained and redeployed across the organisation or even across a wider group of companies. This will not reduce the wage bill but will avoid the need for redundancies. Making fundamental changes to an employee’s role and duties will require their agreement following a fair selection and consultation process.

What support did the Chancellor announce for employers to be attracted to take on apprentices?

The Chancellor announced that employers will be given £2,000 to employ apprentices and £1,500 for apprentices over the age of 25 for each apprentice they hire from 1 August 2020 to 31 January 2021. These payments will be in addition to the existing £1,000 payment the Government already provide for new 16-18 year old apprentices.

He also announced that employers would be given £1,000 for taking on trainees in response to the traineeship scheme being extended.

Can employees reduce their pension contributions?
  • Remember that employees will also be making contributions on any reduced wage under the Coronavirus Job Retention Scheme. The amount contributed may be less, but the contribution rate will be the same, unless the following applies.
  • Employees may reduce their DC employee contributions if their scheme rules allow them to do so, but no further than the statutory minimum if the scheme qualifies as the employer’s auto-enrolment vehicle.
  • Employees might choose to opt-out or cease active membership of their scheme, which might cause a spike in administration at a time when administrators are likely to be understaffed. It is important that employers remember they must not do anything to encourage or induce employees from leaving an auto-enrolment vehicle as this may constitute an offence.
  • Employees who leave their scheme in this way will have to be re-enrolled in due course as and when required by law.
  • For DB schemes, specific considerations apply (see the last section, below).