If you will be requiring staff to undergo coronavirus testing, or asking them to share whether or not they or anyone they live with have experienced any symptoms of coronavirus or come into contact with anyone who has, then you will be processing “special category” information for the purposes of the GDPR. This requires consideration of which lawful basis you are relying on to process that data, and whether you should be conducting a data protection impact assessment or updating employee privacy notices. The Information Commissioner’s Office has published guidance on testing and processing coronavirus health data. It’s a recommended read for all employers.
About The Author
Julian Taylor
Julian qualified as a solicitor in 1990. Before launching Julian Taylor HR Solicitors he set up and ran a highly successful employment department in a leading law firm with offices in London and the Thames Valley.