Here’s a quick update from the team on the key legal obligations under the new legal regime:
Legal obligation to stop the employee from attending workplace
Where an employer knows an employee / worker has tested positive or they live with a person who has tested positive the employer is now legally obliged to stop the employee / worker from working (aside from home working of course) and a failure to do so attracts a fine starting at £1,000.
Regulation 7 creates the offence for Employers to knowingly require or encourage an employee, worker or agency worker too who is required to self-isolate to come to work / attend any place other than their place of self-isolation. It is worth stressing, again, that this includes those who are self-isolating due to living with a person that has tested positive for COVID.
Personal liability, yes, you could be personally liable!
Directors and managers can also be held personally liable if the employer’s offence is committed due to their ‘consent, connivance or neglect’ (reg 11 (8)).
Legal obligation for employees / workers to inform employer
An individual must also tell their employer that they are self-isolating too and it is a criminal offence if they do not stay at home and self-isolate having been instructed to do so by NHS Test and Trace.
Obligation to collect data on public
Employers must also keep records of those who attend their premises
to reflect the fact that organisations are now legally obliged to keep a temporary record of:
Failure to comply with collecting these details is punishable by a fine of up to £4,000.
This is, in the main, aimed at establishments in hospitality / leisure and tourism as well as places of worship, local authority establishments and so called ‘close-contact’ businesses i.e. hairdressers and those who give ‘on-site’ services.
Businesses / organisations should ideally collect the following information (digitally although hard copies are acceptable):
The Information Commissioner’s Office (ICO) has also published guidance on this data which suggests that organisations should:
Ensure that you have the correct Data Protection Policies and Privacy Notices in place and staff are trained in the handling of this data as failure to do this would breach the General Data Protection Regulations. It is also vital that all Directors and Managers are aware of both their personal and the overall business obligations.