Under the guidance, employers should review whether additional personal data collected from and about employees in order to keep them safe during the pandemic is still required, or if the reasons for collecting it can be satisfied in some other way. If information is not required, it should be securely disposed of.
Data about vaccination status is ‘health data’ and special rules apply, so employers should consider whether the primary reason for processing that data is still fair, relevant and necessary, and complies with the special rules. Where large amounts of such data are being processed, a data protection impact assessment is required.
Operative date
- Now
Recommendation
-
Employers can download the new guidance from the ICO website to check they are complying, to meet their data protection obligations to staff.
This article from Atom Content Marketing is for general guidance only, for businesses in the United Kingdom governed by the laws of England. Atom Content Marketing, expert contributors and ICAEW (as distributor) disclaim all liability for any errors or omissions.
Copyright © Atom Content Marketing
ICAEW Business Advice Service
Grow your business with trusted business advice. We connect entrepreneurs, start-ups, and SMEs with ICAEW regulated accountancy firms who will provide a free initial consultation without obligation.
