Skip to main content

Insight article

April 6, 2020

Lockdown your data whilst remote working

Businesses processing personal data must keep the protection of customer and employee data at the front of continuity planning as they tackle the Coronavirus threat.

Staff are likely to be working remotely or in different circumstances, which could make customer and client details more vulnerable to data breaches, and cyber-criminals are ratcheting up their fraudulent scams. It is also worth bearing in mind that data relating to employee health will likely increase given the pandemic, and extra security measures must be given to this special category of personal data.

Businesses are implementing contingency planning, with staff working from home and using domestic internet and possibly personal devices to access cloud-based software and systems, making keeping data safe and secure more important than ever, as fines for data breaches will still apply.

Whilst it’s not quite “Stop all the clocks, cut off the telephone”, the Data Protection Act 2018 (DPA) does provide strict operating boundaries for businesses processing personally identifiable information about individuals with a statutory obligation to notify the regulator of any breach which places an individual’s personally identifiable information at risk. It also gives wide-ranging power to the UK’s data regulator, the Information Commissioner’s Office (ICO), which can impose high penalties for breaches.

Karen Cole, our Deputy Data Protection Leader and Employment Partner, explains:

“Tackling the threat of the Coronavirus is taking businesses into unchartered territory, and while data protection law doesn’t stand in the way of homeworking, or the use of personal devices, it demands even greater attention to security measures, as the ones that you use in the office will need to be tailored to suit these new circumstances.

The human element is often the reason for data breaches and without direct supervision and colleagues to consult, these may be more likely to happen. Certainly, there are reports of a steep rise in attempted cyber fraud, with many more phishing emails, malware and social engineering, where fraudsters dupe staff into revealing information or making money transfers.”

The other major threat to data security during the crisis is handling individual information about staff and visitors who have travelled to high-risk areas, symptoms, test results and when self-isolation has taken place. This is personal data protected by the DPA, but where it concerns health, it may be special category data under the DPA, which requires special security measures.

Such information should be collected and used only as absolutely necessary in managing risk and should not be retained unless essential, such as for an insurance claim.

Karen added:

“Ideally the management and sharing of information is set out in a policy so you know who to tell and what information is shared with whom. So, for example, the ICO has said that it is ok to inform other staff if someone tests positive, or is suspected of having contracted the virus, so as to protect the health and safety of all, but to avoid naming those individuals.

Organisations will be struggling to keep pace in this fast-changing environment, it’s important to make sure you don’t drop the ball when it comes to personal data. If you end up with a breach and compromised data when you come out the other end it will be a serious issue. The ICO has the power to impose fines of up to €20m or 4% of total worldwide turnover and the damage to corporate reputation can be immense.”

While the ICO say they will be pragmatic about matters such as speed of response to information requests during the crisis, there is no suggestion that they will accept reduced data security standards.

Give yourself peace of mind. Call Karen Cole today.

Note: This is not legal advice; it provides information of general interest about current legal issues.

Stay in touch

Subscribe to our newsletter

Stay in touch

By completing your details and submitting this form you confirm you are happy for us to send you marketing communications and that you agree to our Website Privacy Policy and Legal Notice and to us using Mailchimp to process your data.


Sending

News/Insight

  • Why is clear contract drafting important?
    How simple contract clauses can protect your business.


    Read more
  • Ensuring equality: A legal guide to responsibilities and compliance
    Understanding equal opportunities in the workplace


    Read more
  • Navigating the Economic Crime and Corporate Transparency Act 2023: What it means for your business
    The Economic Crime and Corporate Transparency Act 2023 (the Act) represents a significant shift in the UK's approach to combating economic crime, improving corporate transparency, and anti-mo


    Read more
  • Blowing kisses, not boundaries
    Tribunal clears air on workplace etiquette.


    Read more
  • Estate planning: How not to make mincemeat of it!
    The High Court has confirmed that a will handwritten on the back of two cardboard food packages is legally binding.


    Read more

What they say...

  • Leann Paris, March 2025
    “From the beginning to the end, the support we have received throughout the case with all the staff members has been far more than we expected, we got kept up to date with every single matter, I have had stressful few years but Charlotte and he

  • C Smith, March 2025
    “As executor of a will it was a relief for a solicitor to act on my behalf as though no disputes it was still a lengthy and complex process. It was dealt with mostly by Charlotte B. who kept me informed at all times. She explained the process c

  • Marc, March 2025
    “RIAA Barker Gillette were engaged to handle a real estate transaction with unusual circumstances. As a non-UK resident unfamiliar with English conveyancing procedures, I felt completely satisfied with the depth of the information and explanati

  • Leigh, March 2025
    “Instructed Martin on my first property purchase. He was a delight to work with, kept me informed and updated regularly. It was an incredibly smooth and quick process. Couldn’t be happier.”

  • Ms Brownell, March 2025
    “Patrick was amazing from start to finish. He made the process so easy, and explained each step in detail ahead of time so I’d understand what would happen and when. He was incredibly organized and noted every detail, calling out things t

Read more
Send this to a friend