Vanessa Williams
Specialist in Business & Corporate, Charities & Social Enterprise
and Commercial Contracts
No: The ICO have said that it will not penalise organisations whilst they need to prioritise other areas or adapt their usual approach during this extraordinary period. While the ICO cannot extend statutory timescales, it will tell people that they may experience understandable delays when making information rights requests during the pandemic.
No: Data protection law does not prevent staff from working from home and using their own device or communications equipment. You will need to consider the same kinds of security measures for homeworking that you would use in normal circumstances.
Yes: You should keep staff informed about cases in your organisation. You should not provide more information than necessary and therefore you probably do not need to name individuals. You have an obligation to ensure the health and safety of your employees, as well as a duty of care. Data protection does not prevent you from carrying this out.
No: You have an obligation to protect your employees’ health, but that does not necessarily mean you need to gather information about them. It is reasonable to ask people to tell you if they are experiencing COVID-19 symptoms and to advise them to follow government advice if they are. Do not collect more data than you need and ensure that any information collected is treated with the appropriate safeguards.
Yes: It is unlikely that your organisation will have to share information with authorities about specific individuals, but if it is necessary then data protection law will not stop you from doing so.
Specialist in Business & Corporate, Charities & Social Enterprise
and Commercial Contracts
Our business model encourages true diversity, offering the opportunity for entrepreneurial lawyers from all backgrounds and legal career profiles
Contact usWe pursue excellence in every aspect of our work, aiming to deliver quality, innovation and the highest standards of service
Contact us