Skip to content

What are the data protection implications of holding Covid-19 health data?

The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/

Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.

You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.

Related FAQs

What are the current planning restrictions on supermarkets, food retailers and distribution centres concerning deliveries?

On 13 March 2020 the Secretary of State for Housing, Communities and Local Government issued a Written Statement in respect of delivery restrictions.

In this respect, many supermarkets, food retailers and distribution centres in England operate under planning restrictions (conditions and/or obligations) which limit the time and number of deliveries from lorries and other delivery vehicles which can take place particularly at night primarily to protect the residential amenity of nearby residential property.

Key points in the Statement include;

  • Given the exceptional challenges facing the UK from the coronavirus, it is vital that deliveries of food, sanitary and other essential products over the coming weeks can be made as quickly and safely as possible, minimising disruption to the supply chains. The likely pressures on driver capacity mean additional flexibility is needed so that retailers can accept deliveries throughout the day and night where necessary.
  • That planning enforcement is discretionary and that local planning authorities should act proportionately in responding to suspected breaches of planning control.
  • That local planning authorities should not seek to undertake planning enforcement action which would result in unnecessarily restricting deliveries of food and other essential deliveries during this period having regard to their legal obligations.

The Statement acknowledges that the increased frequency of deliveries particularly at night could have a temporary impact on residents. It therefore concludes that the Government will review the need for the flexibility outlined in the Statement after the pressure from the coronavirus has reduced and that it is the intention to withdraw it once the immediate urgency has subsided.

A link to the Written Statement is below.

https://www.parliament.uk/business/publications/written-questions-answers-statements/written-statement/Commons/2020-03-13/HCWS159/

One of my employees has contracted Covid-19, should I report it under RIDDOR?

You must only make a report under RIDDOR (The Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013) when:

  • An unintended incident at work has led to someone’s possible or actual exposure to coronavirus. This must be reported as a dangerous occurrence
  • A worker has been diagnosed as having COVID 19 and there is reasonable evidence that it was caused by exposure at work. This must be reported as a case of disease
  • A worker dies as a result of occupational exposure to coronavirus.
Can I dismiss someone who refuses to wear PPE?

Potentially, yes. If someone refuses to follow the health and safety measures that have been put in place to protect them, colleagues and possibly their customers, including (where appropriate) the use of PPE then this is a disciplinary issue and should be dealt with as such. Repeated failure to comply with the requirement to follow these measures, or a one off significant failure, may be sufficient to justify dismissal, depending on the circumstances.

What will my case look like going forward and what are the courts doing?

During the Covid 19 crisis lawyers and the courts have had to adapt with hearings being heard remotely and with more electronic communication. It is clear that going forward, some of these changes will become more permanent.

The Lord Chancellor, Robert Buckland QC MP, has spoken last week regarding changes to the justice system following the COVID-19 pandemic and we know that there is a significant backlog of work that needs to be processed.

Firstly, 10 sites have been identified for ‘Nightingale courts’ which will allow for better social distancing. The authorities have suggested that it is a possibility that courts will need to stay open for a longer time or at weekends, to increase the number of cases that can be heard safely on any given day. This will enable more cases to be heard in a day and therefore a swifter outcome for your case. The standard of video technology will also continue to improve, with plans for new technology being rolled out across all courts form July onwards. The enhanced use of technology may result in matters being heard more efficiently, decreasing the time spent during each hearing.

HMCTS is working to expand access to audio and video technology to support more and new types of hearings. There has been an increase in the use of new and varying equipment over the lock-down period. With the appropriate systems in place, many more hearings could take place on platforms such as the Cloud Video Platform (CVP). Throughout July, the CVP will be more readily available to Country courts. There will be further hardware rolled out to improve the quality of video hearings, and there will be more efficient methods used to organise video lists.

The increased use and training of CVP means that witnesses and advocates may not need to attend court and could attend the hearing remotely. This will give you increased flexibility, enabling you to attend from your office or home. The CVP is efficient and simple to use, with no complex functions; making it user-friendly. This should make litigation more time and cost effective (albeit that there will be the cultural challenge of having less contact with your legal team or the court experience).

What first steps would you recommend to creating a strategy to integrate pro-active mental health first aid across the workforce?

The Thriving at Work Report and the recent NICE Workplace Mental Health Guidelines provide a good baseline for what all organisations should be doing on workplace mental health – this includes some guidance on training. There does need to be a plan in place and we recommend taking a holistic view of the integration of mental health first aiders into a business – ie it should be one component in a strategy that also comprises training for line managers, awareness training and education for all staff, peer support, and a documented framework for support and signposting.  It is also worth ensuring you have senior manager sponsorship, strong links with Occupational Health if available and also raising awareness via any works councils or employee forums helps ensure there is buy in at all levels.