What do we need to do?
Privacy policy – You must make sure the relevant privacy policies deal with how you will process Covid-19 data. You should have an employee privacy policy and this may already deal with health data (if it doesn’t, it should). You might also need to look at privacy policies for customers, visitors and suppliers. This ensures that processing is lawful, fair and transparent.
Lawful processing conditions – You will need to consider which processing conditions you are relying on (remembering that you need both an Article 6 condition and an Article 9 condition – this is the part of the GDPR which deals with special category data). As a lot of the data you collect will be about employees, you can’t use consent so you will have to find another lawful reason under GDPR which allows you to process the data.
Appropriate policy document – When you are considering your Article 9 processing conditions, remember you must also have an “appropriate policy document” in place.
Processing record – Finally make sure your processing record is up to date with information on what data you collect and use.
Related FAQs
On 2 April 2020, the Government issued guidance relating to Private Finance Initiatives and PF2 Projects. The guidance, which is to be enforced with immediate effect (currently due to stay in place until 30 June 2020), is one of several guidance notes issued to date.
A link to the guidance is set out below:
Key messages to contracting authorities
- PFI contractors should very much consider themselves as being part of the public sector response to the current pandemic
- Covid-19 is not regarded as, and is not to be classified as a force majeure event
- PFI contractors must ensure that contingency plans are up to date and have been reviewed and discussed with contracting authorities to enable the continuity of full services to respond to the pandemic and maintain vital public services
- Contracting authorities should work closely with PFI contractors to use all available options to maintain public services during the emergency period
- Local arrangements should be made where PFI contractors can’t deliver the agreed requirements and performance standards
- “Best efforts” should be made by all parties for the continuation of service provision
Specialist healthcare lawyers from Ward Hadaway ran a free webinar looking at the practical and legal considerations if required to treat healthcare workers from a BAME background or other vulnerable groups differently in the fight against the Covid-19 pandemic.
Despite remote hearings being the default position at present, formal permission will still be required by the court and a template order was circulated with the guidance. This template sets out the relevant directions and recitals to include in your order. An application to the COP for a remote hearing will not be required.
It would apply if the contractor uses an intermediary to provide their services or labour and they would be deemed to be an employee or office holder for tax purposes if they were hired directly by the end user client rather than via the intermediary PSC. This would of course require an assessment of employment status for tax purposes.
Contractors who are not taxed in the UK and supply their services exclusively from outside of the UK are unaffected.
If IR35 applies, tax and NIC’s should be deducted under PAYE by the PSC. In reality this has not been happening so a major reform of the regime was due to be implemented in April 2020. The changes were postponed by one year and are due to take effect from 6 April 2021.
“Within IR35” means a contractor arrangement is caught by IR35 and the individual should be taxed as an employee.
“Outside IR35” means a contractor arrangement is not caught by IR35 and the contractor status is fine.
All policies will impose a stringent obligation, often with time limits, for you to notify insurers of circumstances that may give rise to a potential claim under the policy and non-compliance may well negate your cover. If therefore you have potential cover under your policy you must make a precautionary notification to Insurers as soon as possible.