ICAEW.com works better with JavaScript enabled.

New guidance: ICO guidance helps employers ensure compliance with data protection laws as COVID restrictions end

Author: Atom Content Marketing

Published: 01 May 2022

Employers will welcome new guidance from the Information Commissioner's Office (ICO) designed to help them continue to comply with data protection laws now that COVID-19 restrictions have been removed.

Under the guidance, employers should review whether additional personal data collected from and about employees in order to keep them safe during the pandemic is still required, or if the reasons for collecting it can be satisfied in some other way. If information is not required, it should be securely disposed of.

Data about vaccination status is ‘health data’ and special rules apply, so employers should consider whether the primary reason for processing that data is still fair, relevant and necessary, and complies with the special rules. Where large amounts of such data are being processed, a data protection impact assessment is required.

Operative date

  • Now


  • Employers can download the new guidance from the ICO website to check they are complying, to meet their data protection obligations to staff.



This article from Atom Content Marketing is for general guidance only, for businesses in the United Kingdom governed by the laws of England. Atom Content Marketing, expert contributors and ICAEW (as distributor) disclaim all liability for any errors or omissions.

Copyright © Atom Content Marketing

ICAEW Business Advice Service

Grow your business with trusted business advice. We connect entrepreneurs, start-ups, and SMEs with ICAEW regulated accountancy firms who will provide a free initial consultation without obligation.

Two people looking at a computer screen together smiling, one of them pointing at something on it