GDPR – Covid-19 considerations for employers

If you will be requiring staff to undergo coronavirus testing, or asking them to share whether or not they or anyone they live with have experienced any symptoms of coronavirus or come into contact with anyone who has, then you will be processing “special category” information for the purposes of the GDPR.  This requires consideration of which lawful basis you are relying on to process that data, and whether you should be conducting a data protection impact assessment or updating employee privacy notices.  The Information Commissioner’s Office has published guidance on testing and processing coronavirus health data.  It’s a recommended read for all employers.

Scroll to Top