What are the data protection implications of homeworking?
The Information Commissioner’s Office (ICO) announce new guidance in light of coronavirus.
The ICO is providing new guidance to organisations regarding data protection and coronavirus, which can be accessed here: https://ico.org.uk/for-organisations/data-protection-and-coronavirus/
The ICO has stated the following:
“Data protection is not a barrier to increased and different types of homeworking. During the pandemic, staff may work from home more frequently than usual and they can use their own device or communications equipment. Data protection law doesn’t prevent that, but you’ll need to consider the same kinds of security measures for homeworking that you’d use in normal circumstances.”
Whether you work from home or in the office, you still need to comply with data protection laws. While you need to process personal data with the same care you use in the office, the home working environment throws up specific data protection concerns particularly in respect of data security. You should make sure you have a home working policy which deals with data protection and these data security issues.
Organisations must ensure that, for staff who can work from home, their obligations in respect of processing personal data are clearly communicated. Organisations may already have a home working policy – if this is the case, then this should be reviewed to ensure it remains relevant and up-to-date for practices during this pandemic.
Related FAQs
Where an employer is proposing to dismiss:
- 100 or more employees at one establishment within a 90-day period, consultation must begin at least 45 days before the first dismissal takes effect
- Between 20 and 99 employees within a 90-day period, consultation must begin at least 30 days before the first dismissal takes effect
- If you are proposing to dismiss less than 20 employees then there are no minimum time limits but you must adhere to a fair process which will involve individual consultation and providing the employee with a right of an appeal
If such testing is regarded as a “reasonably practicable step” which has been identified as an appropriate control following a risk assessment then it is something you can do.
Although you can’t physically force someone to have something intrusive done, this is very likely to be a reasonable management instruction and therefore if someone refuses to have this done as a condition of entry into the work place then disciplinary action may follow.
Where this is something that is required of employees, employers should be letting their staff know that this is one of a number of measures that are being introduced into the workplace for their own safety. If the employer can explain, in advance of the return, why temperature checks need to be taken, what the consequences of the results will be- i.e. will they be sent home if over a certain temperature, whether this data will be stored (and if the sole purpose is to determine whether or not they are fit to attend work on a particular day then why are they being stored), and the fact that temperature checks are a requirement of entry to company premises for everyone, then there shouldn’t be significant resistance to this measure.
Large scale temperature checks have in some businesses become part of the “new normal” working environment.
If there is a court order then this should be complied with, unless you are unable to do so because the parent with whom the child lives is self-isolating, the other parent is self-isolating or the children are showing symptoms of the virus. If you are unable to comply with the court order, the other parent should be notified immediately in writing and proposals put forward for how they can see and speak to their children by telephone, FaceTime, Zoom or some other method.
If any necessary variations to the arrangements cannot be agreed then you should contact us for legal advice.
There is less guidance in respect of whether an employee can refuse to go into the workplace as a result of health and safety concerns about their commute. An employer’s duties to ensure the health, safety and welfare of its employees only extend to the workplace or where an employee is acting in the course of their employment. This does not include the risks of travelling to and from work by public transport.
As there are various ways in which an employee can travel to work, it will be difficult for them to legitimately refuse to come to work due to their commute. Employers should discuss any concerns with the employee and seek to find an appropriate resolution. The government has published guidance on safer travel for passengers during the Covid-19 pandemic and employers should encourage flexibility as far as possible, such as allowing employees to travel at off-peak times and staggering workers’ hours.
The guidance is helpful and is likely to be useful to businesses as they seek to respond to the crisis and to restart their business activities as lockdown is eased. However, there remain outstanding questions. For example, can collaboration to prevent widespread insolvencies be viewed as in the interest of consumers? Businesses need to remain aware of the extremely high stakes involved in relation to competition law. Businesses contemplating collaboration with competitors should take legal advice before doing so.