What are the data protection implications of holding Covid-19 health data?
The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/
Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.
You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.
Related FAQs
To qualify for a grant under the scheme you must pay your furloughed staff the wages you are claiming for. Failure to do so may result in a HMRC investigation and/or claims from furloughed staff for unlawful deductions from wages and possibly constructive dismissal claims.
Normal benefits including non-monetary benefits should continue during furlough unless the individual has agreed in writing to reduce or remove a benefit during this time.
Employers are expected to apply for one or more of the financial support schemes available to be able to continue to pay staff.
In appropriate cases, disciplinary action and then dismissal may be fair if an employee refuses to wear a face covering in the workplace. For example, if this is in breach of the government guidance or if employer has issued a reasonable management instruction to this effect due to an identified health and safety risk.
It is important that employers use a fair and reasonable procedure when deciding whether to discipline and/or dismiss an employee and that its actions does not unlawfully discriminate against employees who have legitimate reasons for not wearing masks, such as those individuals who have health conditions like asthma.
The government has produced a series of industry specific “Covid-19 Secure” guidelines, which employers should follow. These guidelines are designed to keep the risk of infection as low as possible, while allowing as many people as possible to resume their livelihoods.
Funding audits are being paused and no new audits will be commenced during the lockdown period.
All three of the PPNs are effective immediately and apply to the following Contracting Authorities:
- Central Government Departments
- Executive agencies
- Non-departmental public bodies
- Local authorities
- NHS bodies
- The wider public sector
In regards to PPN03/20, those in scope organisations that do not currently use procurement cards are advised to immediately put in place arrangements using the relevant Crown Commercial Service Agreement (Lot 2 of RM3828 Payment Solutions).