Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

Are there any limitations on who can be furloughed?

 

Employees on any type of employment contract including full-time, part-time, agency, flexible or zero hours and foreign nationals who are eligible to work in the UK on any visa can be furloughed subject to the following excluded categories:

  • Anyone who was not employed prior to 30 October 2020
  • Anyone for whom you haven’t made a PAYE Real Time Information submission to HMRC between 20 March 2020 and 30 October 2020.
  • Employees who are working but on reduced hours or for reduced pay
  • Employees currently receiving SSP (see FAQ on SSP and self-isolation below)
  • Public sector employees
  • Employees of businesses or organisations in receipt of public funding for staff costs (except for those who are not primarily funded by the government and whose staff cannot be redeployed to assist with the Covid-19 response)
What actions and measures should be avoided?

The CMA is particularly concerned about certain activities, its guidance highlights:

  • Exchange of commercially sensitive information where this is not necessary in response to the crisis
  • Collaboration which unfairly excludes third parties
  • Abuse of a dominant position (including a dominant position held as a result of the crisis) – particularly to charge excessive prices
  • Seeking to maintain prices or prevent reductions in prices
  • Cooperation going beyond what is necessary to respond to the crisis in the interests of consumers
Can an employee on family related leave be furloughed?

Yes, but your claim will be limited to any enhanced contractual payments you make to employees who qualify for the relevant family related pay.

All maternity and parental rights remain in force for anyone in this category who is furloughed. However you may need to calculate average weekly pay differently if the employee was furloughed and then started family related leave on or after 25 April 2020.

Furlough pay cannot be claimed for the period that an employee is receiving Maternity Allowance. An employee can agree to accept furlough pay but they must contact Jobcentre Plus to stop their Maternity Allowance payments for this period.

When will I receive a grant under this scheme?

The Chancellor confirmed that payments under the scheme would not be available immediately.

I’m a doctor. Should I work outside my field of practice during the pandemic?

Whilst it is acknowledged that doctors may be working in unfamiliar circumstances or surroundings, or in clinical areas outside their usual practice. Doctors should consider the best course of action to take in these circumstances by utilising the following:

  • What is within their knowledge and skills
  • What support other members of the healthcare team could offer
  • What will be best for the individual patient given available options
  • The protection and needs of all patients they have a responsibility towards
  • Minimising the risk of transmission and protecting their health.