The Information Commissioner’s Office has published guidelines on the use of personal information relating to employees and COVID-19. You can read this in full here:
ico.org.uk/global/data-protection-and-coronavirus-information-hub/coronavirus-recovery-data-protection-advice-for-organisations
This also includes six data protection steps for organisations:
ico.org.uk/global/data-protection-and-coronavirus-information-hub/coronavirus-recovery-six-data-protection-steps-for-organisations
Specifically the guidance covers two main points:
- that data protection does not prevent organisations from asking employees whether they are experiencing Coronavirus symptoms so long as the principles of the law are applied, including transparency, proportionality and fairness.
- if these principles are applied, data protection will not prevent organisations from introducing appropriate testing.
Six data protection steps for employers:
- Only collect and use what data is necessary
- Keep it to a minimum
- Be clear, open and honest about the data (how and why personal data is being used as well as implications)
- Treat people fairly
- Keep personal data secure
- Ensure that staff know about and can exercise their information rights
If you would like advice or guidance on this or any related matter please contact us directly.
