What do we need to do?
Privacy policy – You must make sure the relevant privacy policies deal with how you will process Covid-19 data. You should have an employee privacy policy and this may already deal with health data (if it doesn’t, it should). You might also need to look at privacy policies for customers, visitors and suppliers. This ensures that processing is lawful, fair and transparent.
Lawful processing conditions – You will need to consider which processing conditions you are relying on (remembering that you need both an Article 6 condition and an Article 9 condition – this is the part of the GDPR which deals with special category data). As a lot of the data you collect will be about employees, you can’t use consent so you will have to find another lawful reason under GDPR which allows you to process the data.
Appropriate policy document – When you are considering your Article 9 processing conditions, remember you must also have an “appropriate policy document” in place.
Processing record – Finally make sure your processing record is up to date with information on what data you collect and use.
Related FAQs
It is envisaged that employees of organisations falling into the first two categories set out above and won’t be eligible for the job retention scheme in relation to the majority of their employees. It is envisaged that NHS Trusts for example are going to require their staff to be working at full capacity where possible. However, the guidance doesn’t definitely exclude public sector organisations from furloughing employees and notably the government expects such organisations to use public money to continue to pay staff and not furlough them, rather than say requires. In reality, it is difficult to see how such an organisation will be able to rely on the scheme, but the guidance doesn’t completely rule it out.
Yes, but the Courts have been temporarily restructured into three categories:
- Open courts (open for business including vital in person hearings)
- Staffed courts (for video and telephone hearings)
- Suspended courts (no hearings of any kind)
These changes have been effective from Monday 30 March 2020.
A number of our clients and networks raised issues in the early stages of the Scheme around the requirement for personal guarantees to access finance under the Scheme. The Scheme has now been updated so that:
- For facilities under £250,000, personal guarantees cannot be taken to support lending under the Scheme.
- For facilities above £250,000, personal guarantees may still be required by a lender but the amount which can be recovered under these guarantees is capped at a maximum of 20% of the outstanding balance of the CBILS facility after taking into account any other recoveries from business assets.
Residents will be obliged to:
- Not act in a way that creates a significant risk of a building safety risk materialising
- Not interfere with building safety equipment in the common parts
- Comply with an Accountable Person’s request for information in relation to the assessment and management of building safety risks.
The Accountable Person then has powers in relation to these duties, including:
- Issuing a contravention notice, requiring a resident to pay for replacement or repair of safety equipment which they have interfered with
- Applying for court orders in certain situations
- Requesting access at a reasonable time (in writing with at least 48 hours’ notice) to a resident’s property for the purposes of assessing or managing building safety risks, or checking compliance with the resident’s duties as above.
Secondary legislation is still awaited to bring these provisions into force, so the timing is unknown, but it will likely be within the next 12 months in line with the anticipated timetable for the remainder of the Act.
The guidance is non-statutory and is not binding on business. However, businesses should be aware that there might be reputational consequences if they do not follow the guidance; we have already seen in the context of taking advantage of furlough funding that not being in breach of the law is no protection against negative publicity. Further to the extent a contract expressly requires parties to act reasonably, it could be expected that this guidance is one of the factors a court would consider in determining what is reasonable.