What are the limitations of furloughing staff for publicly funded organisations?
The guidance from the Government concerning private sector organisations is very different from the guidance for public sector and organisations that receive public funding. The guidance states:
“The government expects that the scheme will not be used by many public sector organisations, as the majority of public sector employees are continuing to provide essential public services or contribute to the response to the coronavirus outbreak.
Where employers receive public funding for staff costs, and that funding is continuing, we expect employers to use that money to continue to pay staff in the usual fashion – and correspondingly not furlough them. This also applies to non-public sector employers who receive public funding for staff costs. Organisations who are receiving public funding specifically to provide services necessary to respond to Covid-19 are not expected to furlough staff.”
This guidance isn’t particularly clear but it appears that there is a recognition that there are different types of organisations which could be caught by this:
- Organisations who will be required to provide frontline services during the Covid-19 response. It is interpreted that NHS organisations such as NHS Trusts will fall firmly into this category. Employees of such organisations are expected not to be furloughed and to continue to work and be paid their normal salary in the usual way.
- Organisations who receive public funding to provide services to respond to the Covid-19 crisis. These organisations are not expected to furlough their staff. The type of organisation that would fit into this category are those that have been commissioned to developing breathing apparatus or testing kits to meet the needs of the healthcare sector during the peak of the pandemic.
- Organisations who receive public funds for staff costs to operate services. Employers are expected to continue to pay staff if the money to pay them is publicly funded. It is strongly inferred that this is irrespective of whether such staff have any work to perform. The type of organisation that is likely to fall into this category are GP practices, charities and private sector companies that have won contracts with the public sector.
Related FAQs
With the loss of face-to-face meetings in the current situation, video conferencing has taken centre stage. But how do you do that in a compliant way? Here are some of the main high-level data protection issues to consider when selecting and implementing a new third party provider’s video conferencing system.
- Make sure you do your due diligence on the security measures offered by the provider. Clearly you can’t visit them, so look at the information offered publicly by the provider and read good quality, reliable, third party sources and ask the provider questions directly. Also ask any other organisations you know that use the provider. Document all this.
- If personal information is being sent outside of the UK/European Economic Area, make sure that transfer complies with GDPR. If it’s a US provider, is it registered in the EU-US Privacy Shield list or does it offer a model clause contract (you’re likely to need the 2010 version)? Or is the service provided from a country whose data protection laws offer equivalent protection to those in Europe? Look at the support service as well as the hosting. Document this.
- Make sure you put a compliant processor agreement in place. The provider should offer one as part of the contract terms. Check it meets GDPR requirements.
- You’re likely to need to update your privacy notice, particularly if you’re going to record calls. Provide participants with a short message and link to the privacy notice in the meeting invite and on any registration page.
- Create or update other GDPR-mandated documentation – for example, depending on your use, you may need a legitimate interests assessment and to update your record of processing.
- Finally, configure and use the system in a secure and compliant way. Look at the settings/options carefully and think through the security and compliance implications of each. That could include deciding who in the meeting can share their screen; whether or not you use passwords for participants; whether or not to record, and if you’re going to record, where to store the recording. Document your decisions and the reasons for them.
The ICO has said it understands that resources, whether they are finances or people, might be diverted away from usual compliance work during the pandemic. However the last thing you need at the moment is to create a bigger problem than the one you are trying to solve. So do the best you can, ask for help from one of our specialists if you need it, and keep the whole thing under review.
On 16 April 2020, Ian Hulme, the ICO’s Director of Assurance, posted a blog for business owners, employers and managers about how to safely roll out the latest video conferencing technology.
On 21 April 2020, the NCSC published security guidance for organisations on choosing, configuring and deploying video conferencing services.
Employers will be collecting and sharing health information. Health information is sensitive and higher data protection standards apply. Here are a few key pointers.
- Update privacy notices to cover the new collection and sharing of employees’ information and provide these to the workforce. Be transparent and fair.
- Identify the legal basis and condition for use of this information and put any required paperwork in place. The ICO guidance will help. For some conditions such as the employment condition, an Appropriate Policy Document (APD) will be required. The ICO has an APD template.
- Only use the information for the purpose of managing the workforce during the pandemic.
- Only collect or share information if it’s necessary – if it’s a targeted and proportionate way of achieving your purpose.
- Make sure any health information collected and shared is accurate – there may be serious consequences if it’s not.
- Work out how long the information must be kept for. Keep a record of that period and act on it at the appropriate time.
- Security is very important – there may be malicious actors trying to trick employers and employees. Make sure employees know how to identify a genuine NHS Test and Trace contact. Keep the information secure. Use the ICO’s data sharing checklists** and keep a record of the disclosures made and why. Control external disclosures – only certain authorised members of staff should make them.
- Make sure individuals can still exercise their data protection rights – that’s also very important. Keep data protection records up-to-date and ensure any exports of personal information outside the UK are compliant.
- Before introducing employer-led testing like taking temperatures, thermal imaging or other potentially intrusive tests, work out if a data protection impact assessment (DPIA) is required. It will be if the intended processing is ‘high risk’. If it is, then carry out a full DPIA. It will help address the issues systematically and mitigate risks.
- All this demonstrates ‘accountability’ – it shows affected individuals and the ICO that the employer is complying with data protection requirements.
If you need further help, please visit the ICO’s data protection and coronavirus information hub or ask our data protection team.
** Please note that this link is to the ICO’s existing checklists and data sharing code of practice. We will update the link to the ICO’s new checklists after they are published.
The scheme is being administered by HMRC under a new online portal that has been set up. It applies to businesses, charities, recruitment agencies, individuals who employ a nanny, administrators (where there is a reasonable likelihood of re-hiring the workers) and public authorities.
All employers with a UK payroll can apply as long as you have:
- Created and started a PAYE payroll scheme on or before 28 February 2020
- Enrolled for PAYE online (which can take up to 10 days)
- A UK bank account.
To make a claim you will need:
- The number of employees being furloughed
- The start and end date of the claim
- The name and National Insurance Numbers for each furloughed employee
- Your employer PAYE reference number
- To be registered for PAYE online
- The Self-Assessment Unique Taxpayer Reference, Corporation Tax Unique Taxpayer Reference or Company Registration Number as appropriate for your entity
- Your UK bank account details and sort code
- Your name and contact number
- Your organisation’s registered name
- Your organisation’s billing address
- The full amounts you are claiming for including:
- Employee wages
- Employer national insurance contributions
- Employer minimum pension contributions
For claims for those who are flexibly furloughed you will also need:
- the number of usual hours the employee would work during the claim period
- the hours the employee has worked or will work during this period
- you will also need to keep a record of the number of furloughed hours that the employee has or will be furloughed for.
You will need the above information ready before you access the system to make a claim. You will also need to have calculated the amounts claimed in advance as the application needs to be completed in one session. You can currently save one draft of the application and it must be completed within 7 days of starting it.
The Government has issued a step-by-step guide for employers who wish to make a claim under the scheme which can be found using the link below. It contains useful information about calculating the payments claimed. You will need to register for a Government Gateway ID and password if you do not yet have one in order to access the portal.
If you use an agent who is authorised to act for you for PAYE purposes, they will be able to make a claim on your behalf. If you use a file only agent (who files your RTI return but doesn’t act for you on any other matters) they won’t be authorised to make a claim for you and you will need to make the claim yourself. A file only agent can assist you in obtaining the information required to make a claim (listed above). If an agent makes a claim on your behalf you will need to tell them which bank account you would like the grant to be paid into.
For claims for fewer than 100 employees you will need to input the details separately for each employee. If claiming for more than 100 employees you can upload a file with the information instead. The file should include the following information for each furloughed employee: name, National Insurance number, claim period and claim amount, payroll/employee number (optional). You will also need to include details of hours normally worked, actual hours worked and hours furloughed for those who are flexibly furloughed.
The need to demonstrate the impact of coronavirus on your business is not one of the criteria listed above about who can make a claim, so the government does not appear to intend to set a specific test to determine if a business is “severely impacted by coronavirus”. You are not required to explain the impact of Coronavirus on your business when submitting your claim.
HMRC will retain the right to audit any claim retrospectively. You must keep records for 6 years including:
- the amount claimed and claim period for each employee
- the claim reference number
- you calculations for each claim
- details of hours usually worked and hours actually worked for flexibly furloughed employees.
You must tell your employees that you have made a claim under the scheme, and you must continue to pay their wages during this time.
If the business has areas requiring an increased workforce whilst others require a reduced workforce, staff can be retrained and redeployed across the organisation or even across a wider group of companies. This will not reduce the wage bill but will avoid the need for redundancies. Making fundamental changes to an employee’s role and duties will require their agreement following a fair selection and consultation process.
Again, the primary point must be that an open dialogue is held with that individual to understand their concerns and to properly consider the impact that not wearing PPE will have on their abilities to undertake their duties. Consideration must be given as to whether there are any parts of their duties that they can undertake and whether they can remain in their role. Engage with the individual to ensure that you understand their point of view. What other duties can they do if they cannot do fulfil all the duties of their role?