The six key data protection steps are:
- Only collect and use what’s necessary
- Keep it to a minimum
- Be clear, open and honest with staff about their data
- Treat people fairly
- Keep people’s information secure
- Staff must be able to exercise their information rights
Further information can be found on the ICO website .
Most importantly, the GDPR does not prevent organisations asking employees whether they are experiencing any coronavirus (COVID-19) symptoms or introducing appropriate testing, but it does require you to be responsible with people’s personal data and ensure it is handled with care.
If you would like to discuss the data protection issues around engaging with your employees as they return to work, please contact a member of our Information Law team, or complete the form below.