What are the data protection implications of holding Covid-19 health data?
The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/
Information about the Covid-19 health status of individuals is special category data under the GDPR. This means it is high risk which has implications for how you use it, store it and keep it secure.
You will already hold health data about your employees as this is necessary to provide a safe, accessible place to work and to make reasonable adjustments to the workplace. You now need to make sure that the information you gather about your employees, visitors to your sites, customers and suppliers about Covid-19 is processed in accordance with data protection laws.
Related FAQs
An extension to the traditional business interruption insurance, “contingent business interruption insurance” often covers areas such as business interruption due to damage to property of a customer or suppliers. Nonetheless, proving loss can be problematic.
Claims for loss of use of the property may be possible as a result of forced business closure due to lockdown. Accordingly policies should be carefully reviewed to see if cover is available.
Aside from the CBILS Scheme, the Government have, or are in the process of, implementing several different schemes to support businesses financially through the Covid-19 outbreak.
The reporting requirements relating to cases of, or deaths from, COVID-19 under RIDDOR apply only to occupational exposure, that is, as a result of a person’s work.
You should only make a report under RIDDOR when one of the following circumstances applies:
- an accident or incident at work has, or could have, led to the release or escape of coronavirus (SARS-CoV-2). This must be reported as a dangerous occurrence
- a person at work (a worker) has been diagnosed as having COVID-19 attributed to an occupational exposure to coronavirus. This must be reported as a case of disease
- a worker dies as a result of occupational exposure to coronavirus. This must be reported as a work-related death due to exposure to a biological agent
It really depends on what your measure of success is! We would suggest regular wellbeing surveys – if the results of wellbeing surveys suggest that the culture is becoming more open, more psychologically safe, if people are asking for help or referring colleagues to MHFAs as a safe and effective pair of hands – these would be strong indicators of success.
Yes. You can continue to fully furlough employees until 30 September 2021 (but from between 1 August 2020 and 31 December 2020 and from 1 July 2021 you need to contribute to the cost). If on full-time furlough, employees continue not to be able to undertake any work for you. As before, they can undertake training, or volunteer or work for another employer or organisation (if contractually allowed).