The ICO has published in depth guidance for employers on processing workers health data. It aims to provide tips and good practice advice for employers on how to comply with data protection legislation. Health data is categorised as special category personal data and is granted enhanced protection under the UK GDPR.
The guidance explains how the Data Protection Act applies to the processing of workers health and key points to consider to ensure compliance. These include:
- Observing the stricter requirement for processing special category data;
- Providing employees with details about the employer’s processing of their data;
- Carrying out a data protection impact assessment; and
- Data minimisation and security.
The guidance looks at how data protection law applies to particular workplace circumstances. For example, managing sickness absence records and occupational health schemes.
The guidance also has a set of checklists to help guide employers through their data protection issues whenever they need to process workers’ health information.
Click here to access the guide:
