What do we need to do?
Privacy policy – You must make sure the relevant privacy policies deal with how you will process Covid-19 data. You should have an employee privacy policy and this may already deal with health data (if it doesn’t, it should). You might also need to look at privacy policies for customers, visitors and suppliers. This ensures that processing is lawful, fair and transparent.
Lawful processing conditions – You will need to consider which processing conditions you are relying on (remembering that you need both an Article 6 condition and an Article 9 condition – this is the part of the GDPR which deals with special category data). As a lot of the data you collect will be about employees, you can’t use consent so you will have to find another lawful reason under GDPR which allows you to process the data.
Appropriate policy document – When you are considering your Article 9 processing conditions, remember you must also have an “appropriate policy document” in place.
Processing record – Finally make sure your processing record is up to date with information on what data you collect and use.
Related FAQs
All policies will impose a stringent obligation, often with time limits, for you to notify insurers of circumstances that may give rise to a potential claim under the policy and non-compliance may well negate your cover. If therefore you have potential cover under your policy you must make a precautionary notification to Insurers as soon as possible.
The government has produced a series of industry specific “Covid-19 Secure” guidelines, which employers should follow. These guidelines are designed to keep the risk of infection as low as possible, while allowing as many people as possible to resume their livelihoods.
- Working with PFI providers to get contingency plans up to date
- If a PFI provider is struggling to achieve service delivery requirements due to Covid-19, then local arrangements should be put in place to:
- maintain unitary charge payments
- revise contract requirements/standards
moderating payment and performance regimes where appropriate.
- In any event, you may wish to review and adjust your requirements to reflect the current situation. It is possible that some requirements can be relaxed, whereas others need to be tightened. For example, there may be an increased need for cleaning and maintenance in certain areas of your PFI premises or the layout of the premises and/or room uses may have temporarily changed. With staff illness and shortage likely to be an issue, you may also wish to consider if the resource can be moved from one area to another to help maintain essential services.
- When putting local bespoke arrangements into place it is vital that:
- Contract requirements or performance standards are not relaxed to the point where health and safety are put at risk.
- It is made clear that the arrangements are temporary and that matters will return to normal as soon as the Covid-19 emergency is over. Indeed the guidance note makes clear that if assets temporarily close they should be kept in such condition that they can be immediately up and running when this emergency is over. In such instances, likely a basic level of maintenance and security will therefore be required as a minimum.
- The Pensions Regulator has published regularly-updated guidance for employers.
- It will take “a proportionate and risk-based approach towards enforcement decisions … with the aim of supporting both employers and savers”. In other words, the law remains the same, but the Regulator will show restraint in enforcement against breaches.
No, there is no obligation on employers to offer a flexible furlough arrangement to staff. Operationally, flexible furlough may not be appropriate for your business and equally, returning on a part-time basis may not be suitable for individuals already furloughed for various reasons. Concerns about returning to work part-time or at all should be considered on a case-by-case basis.