What do we need to do?
Privacy policy – You must make sure the relevant privacy policies deal with how you will process Covid-19 data. You should have an employee privacy policy and this may already deal with health data (if it doesn’t, it should). You might also need to look at privacy policies for customers, visitors and suppliers. This ensures that processing is lawful, fair and transparent.
Lawful processing conditions – You will need to consider which processing conditions you are relying on (remembering that you need both an Article 6 condition and an Article 9 condition – this is the part of the GDPR which deals with special category data). As a lot of the data you collect will be about employees, you can’t use consent so you will have to find another lawful reason under GDPR which allows you to process the data.
Appropriate policy document – When you are considering your Article 9 processing conditions, remember you must also have an “appropriate policy document” in place.
Processing record – Finally make sure your processing record is up to date with information on what data you collect and use.
Related FAQs
The Chancellor confirmed that payments under the scheme would not be available immediately.
Yes. The system for Probate Applications has moved on-line and continues to be available as well as by post. However, if you need to complete an Inheritance Tax Return IHT400 you are likely to experience problems collating information due to delays in many organisations being able to provide you with current values while their offices are closed and staff working remotely. Property valuations will be particularly problematic where surveyors or valuers are unable to attend properties to undertake non-urgent work. If you cannot wait, you must use your best endeavours to be as accurate as possible as regards the information you provide in the IHT400 and follow up by providing HMRC with actual values as soon as you can do so. HM Courts and Tribunal Service is however warning that delays can be expected at this time.
MHFAs are not qualified mental health medical professionals and they should not be diagnosing or giving medical advice, however, their training will equip them to provide initial support to those experiencing symptoms of mental ill health, and to signpost to further professional help when needed. The MHFA training makes the boundaries of the MHFA role very clear and there should be clearly defined role specifications, procedures and support pathways in place to ensure that individuals are referred on appropriately. There should be peer support in place for MHFAs and a system in place to ensure no individual or individuals are overloaded.
Where an employer is proposing to dismiss:
- 100 or more employees at one establishment within a 90-day period, consultation must begin at least 45 days before the first dismissal takes effect
- Between 20 and 99 employees within a 90-day period, consultation must begin at least 30 days before the first dismissal takes effect
- If you are proposing to dismiss less than 20 employees then there are no minimum time limits but you must adhere to a fair process which will involve individual consultation and providing the employee with a right of an appeal
Yes. For further guidance, please see our FAQs section on Furlough.