Skip to content

What do we need to do?

Privacy policy – You must make sure the relevant privacy policies deal with how you will process Covid-19 data. You should have an employee privacy policy and this may already deal with health data (if it doesn’t, it should). You might also need to look at privacy policies for customers, visitors and suppliers. This ensures that processing is lawful, fair and transparent.

Lawful processing conditions – You will need to consider which processing conditions you are relying on (remembering that you need both an Article 6 condition and an Article 9 condition – this is the part of the GDPR which deals with special category data). As a lot of the data you collect will be about employees, you can’t use consent so you will have to find another lawful reason under GDPR which allows you to process the data.

Appropriate policy document – When you are considering your Article 9 processing conditions, remember you must also have an “appropriate policy document” in place.

Processing record – Finally make sure your processing record is up to date with information on what data you collect and use.

Related FAQs

How do I ensure my use of video conferencing calls complies with GDPR?

With the loss of face-to-face meetings in the current situation, video conferencing has taken centre stage. But how do you do that in a compliant way? Here are some of the main high-level data protection issues to consider when selecting and implementing a new third party provider’s video conferencing system.

  1. Make sure you do your due diligence on the security measures offered by the provider. Clearly you can’t visit them, so look at the information offered publicly by the provider and read good quality, reliable, third party sources and ask the provider questions directly. Also ask any other organisations you know that use the provider. Document all this.
  2. If personal information is being sent outside of the UK/European Economic Area, make sure that transfer complies with GDPR. If it’s a US provider, is it registered in the EU-US Privacy Shield list or does it offer a model clause contract (you’re likely to need the 2010 version)? Or is the service provided from a country whose data protection laws offer equivalent protection to those in Europe? Look at the support service as well as the hosting. Document this.
  3. Make sure you put a compliant processor agreement in place. The provider should offer one as part of the contract terms. Check it meets GDPR requirements.
  4. You’re likely to need to update your privacy notice, particularly if you’re going to record calls. Provide participants with a short message and link to the privacy notice in the meeting invite and on any registration page.
  5. Create or update other GDPR-mandated documentation – for example, depending on your use, you may need a legitimate interests assessment and to update your record of processing.
  6. Finally, configure and use the system in a secure and compliant way. Look at the settings/options carefully and think through the security and compliance implications of each. That could include deciding who in the meeting can share their screen; whether or not you use passwords for participants; whether or not to record, and if you’re going to record, where to store the recording. Document your decisions and the reasons for them.

The ICO has said it understands that resources, whether they are finances or people, might be diverted away from usual compliance work during the pandemic. However the last thing you need at the moment is to create a bigger problem than the one you are trying to solve. So do the best you can, ask for help from one of our specialists if you need it, and keep the whole thing under review.

On 16 April 2020, Ian Hulme, the ICO’s Director of Assurance, posted a blog for business owners, employers and managers about how to safely roll out the latest video conferencing technology.

On 21 April 2020, the NCSC published security guidance for organisations on choosing, configuring and deploying video conferencing services.

Read more about this
What tips can you share for remote mediations?

Remote mediations have become increasingly popular as a way of settling a dispute before it goes to court. There are a number of ways in which you can mediate remotely, but the most common platform is Zoom, due to its easy-to-use nature and the ability to have ‘break-out rooms’. We have answered some FAQs and set out a quick guide to remote mediations below.

What is remote mediation?

  • Mediation is a form of assisted negotiation, in which a neutral 3rd party mediator seeks to help the parties resolve their dispute. The process on the day is managed by the mediator and adopts certain key ground-rules. These are that discussions are private and cannot be referred to in court; and the process is entirely voluntary and non-binding, if and until a settlement is finalised. In the current pandemic mediations are now usually conducted remotely by video conference, instead of an in-person meeting.
  • The structure of the mediation will depend on the matters that are in dispute. Before the mediation the parties will exchange their views in position papers and prepare a bundle of the key documents.
  • Generally the parties will start the mediation in the same ‘room’ as the mediator, where they will be invited to set out their positions. The mediator will then put the parties into ‘break-out rooms’. These rooms serve as your own private ‘room’ which the mediator will join. You will therefore be able to have private discussions with the mediator without the other side being able to hear those discussions. The mediator will go between the ‘break-out rooms’ to discuss a party’s position further in order to attempt to reach a settlement.
  • If an agreement is reached, at the end of the mediation the Settlement Agreement will be drafted. The Settlement Agreement works as an enforceable contract. The Settlement Agreement will outline the details of what has been agreed and the intentions of the parties, such as any actions required, payments to be made and appropriate timescales. Each party will sign the Settlement Agreement, which can be done electronically.
  • It is not always possible to reach a resolution/agreement by mediation, but the mediator serves as an impartial third party in order to aid the process. If no agreement has been reached, the mediation may still prove useful as it will give you a better understanding of the other side’s position.

What should I do before the mediation to prepare?

  • Ensure that you are in an area with minimal distractions. Mediation is a confidential process, so make sure that you are in a private location.
  • Ensure that your microphone and camera work and that you have access to the online platform that will be used. We send our clients a link to the website in advance so that this can be tested out.
  • Consider any agreed dress code and dress appropriately.
  • Have a copy of the mediation bundle to hand, whether in hard or soft copy, and be aware of what documents are in there.

Any tips on what to do on the day?

  • Remember to make sure that before you have any private conversations with the mediator you are in your break-out room.
  • You may contact the mediator whilst being in the break-out room. On Zoom there is an ‘Ask for Help’ button on the screen. The mediator will then be prompted to join your room.
  • Ensure that you inform the mediator if you or others enter/leave the room. It is important that the mediator knows who is present.
  • Be mindful of body language and facial expressions as these can appear more enhanced on the screen, and they are easier to pick up in a remote mediation.
  • Stay calm and focussed at all times. When you have a dispute it is sometimes tricky to maintain a calm manner, but this is always vital in attempting to reach an agreement.
  • When engaging with the mediator avoid any external distractions such as text messages and emails, as it may come across that you are not interested in the process. It is important to pay attention so that you do not miss any dialogue which may be key to any agreement that is reached.
  • When you are in the break-out room without the mediator make sure that you take breaks and keep refreshed, as virtual mediations can be tiring.
Read more about this
What is the NHS coronavirus Test and Trace scheme and how does it work?

The NHS Test and Trace service is operated by the NHS in England to track and help prevent the spread of COVID-19. Where an individual displays symptoms of coronavirus they can be tested to determine whether or not they have the disease. Those with the disease will then be contacted by NHS contact tracers and asked who they have come into close contract with.
Close contact is defined as:

  • Face to face (within 1 metre)
  • Spent more than 15 minutes within 2 metres of another person
  • Travelled in a car or on a plane with another person

The contact tracer will then contact those people with whom the individual has come into close contact and tell them to self-isolate for 14 days.

Read more about this
I’m a doctor. Should I work outside my field of practice during the pandemic?

Whilst it is acknowledged that doctors may be working in unfamiliar circumstances or surroundings, or in clinical areas outside their usual practice. Doctors should consider the best course of action to take in these circumstances by utilising the following:

  • What is within their knowledge and skills
  • What support other members of the healthcare team could offer
  • What will be best for the individual patient given available options
  • The protection and needs of all patients they have a responsibility towards
  • Minimising the risk of transmission and protecting their health.
Read more about this
VIDEO: The outlook for corporate transactions

In our latest “in conversation” webinar we discussed the outlook for the corporate transaction market. Whilst it would be a brave person to predict the future of anything at the moment given current circumstances, we were joined by two organisations who are very well placed to provide their views.

John Laud, Head of Corporate Banking for North and West Yorkshire for Barclays, his colleague Stephen Loureda from their Credit Analysis Team, and Jill Williams, Investment Director of Mercia Asset Management’s Growth Fund, were in conversation with Ward Hadaway corporate partners Adrian Ballam and Jonathan Pollard to share their thoughts about how the ‘new normal’ for the transactions market may look:

  • With supply chain and forecast prediction challenges, how will banks and investors determine what represents a sound opportunity?
  • How will distressed and opportunistic acquisition opportunities be funded, and what is investor appetite for such opportunities?
  • How have seller and buyer pricing expectations been impacted as a result of the pandemic?
  • How are funders reacting, and how should ambitious businesses respond to the very low, or even negative, interest rates?

We expect this video to be of real value to those businesses whose plans of buying, selling or investment may have been impacted by the current economic crisis, but who are looking at opportunities to determine how they may shape their futures – #gettingbacktobusiness.

Read more about this