{"id":16765,"date":"2020-03-21T11:25:40","date_gmt":"2020-03-21T11:25:40","guid":{"rendered":"https:\/\/businessadapter.es\/coronavirus-and-data-protection\/"},"modified":"2024-12-11T10:49:11","modified_gmt":"2024-12-11T10:49:11","slug":"coronavirus-and-data-protection","status":"publish","type":"post","link":"https:\/\/businessadapter.es\/en\/coronavirus-and-data-protection\/","title":{"rendered":"CORONAVIRUS AND DATA PROTECTION"},"content":{"rendered":"\n<h2><strong>Coronavirus and <\/strong><strong>Data Protection<\/strong><\/h2>\n<p style=\"text-align: justify;\">In the current health emergency situation, queries related to <strong>Coronavirus and <\/strong><a href=\"https:\/\/businessadapter.es\/servicios\/proteccion-de-datos\/proteccion-datos-valencia\"><strong>Personal Data Protection <\/strong><\/a>Data Protection, are important.<\/p>\n<p style=\"text-align: left;\">Our headquarters in <a href=\"https:\/\/businessadapter.es\/en\/\"><strong>Valencia<\/strong> <\/a>has analyzed the doubts raised by customers about the need to treat their employees&#8217; data in case of testing positive for the COVID-19 coronavirus.<a href=\"https:\/\/businessadapter.es\/en\/\"><img decoding=\"async\" class=\" wp-image-4535 alignright\" src=\"https:\/\/businessadapter.es\/wp-content\/uploads\/2020\/03\/coronavirus-4914028-300x170.jpg\" alt=\"\" width=\"634\" height=\"360\" srcset=\"https:\/\/businessadapter.es\/wp-content\/uploads\/2020\/03\/coronavirus-4914028-300x170.jpg 300w, https:\/\/businessadapter.es\/wp-content\/uploads\/2020\/03\/coronavirus-4914028-1024x581.jpg 1024w, https:\/\/businessadapter.es\/wp-content\/uploads\/2020\/03\/coronavirus-4914028-768x435.jpg 768w, https:\/\/businessadapter.es\/wp-content\/uploads\/2020\/03\/coronavirus-4914028-1536x871.jpg 1536w, https:\/\/businessadapter.es\/wp-content\/uploads\/2020\/03\/coronavirus-4914028-2048x1161.jpg 2048w\" sizes=\"(max-width: 634px) 100vw, 634px\" \/><\/a> in the event of testing positive for the <a href=\"https:\/\/www.who.int\/es\/emergencies\/diseases\/novel-coronavirus-2019\" target=\"_blank\" rel=\"noopener\">COVID-19 coronavirus.<\/a><\/p>\n<p style=\"text-align: left;\">There are also doubts as to whether such processing complies with the guidelines imposed on us by data protection regulations. <a href=\"https:\/\/businessadapter.es\/servicios\/proteccion-de-datos\/proteccion-datos-valencia\"><strong>data protection regulations. <\/strong><\/a> <\/p>\n<h3>Preliminary data protection analysis&nbsp;<\/h3>\n<p style=\"text-align: justify;\">There is no doubt that the European General Data Protection Regulation 2016\/679 (hereinafter, <a href=\"https:\/\/www.boe.es\/doue\/2016\/119\/L00001-00088.pdf\" target=\"_blank\" rel=\"noopener\"><strong>GDPR<\/strong><\/a>), as well as the Organic Law on Personal Data Protection and Digital Rights Guarantees 3\/2018 of December 5 <strong>(<a href=\"https:\/\/www.boe.es\/boe\/dias\/2018\/12\/06\/pdfs\/BOE-A-2018-16673.pdf\" target=\"_blank\" rel=\"noopener\">LOPD-GDD<\/a>)<\/strong>, lay the foundations for the lawfulness of processing.<\/p>\n<p style=\"text-align: justify;\">Likewise, it is also determined which data are considered special category data, among which are those related to health.<\/p>\n<p style=\"text-align: justify;\">Recital 46 of the <strong>GDPR<\/strong> establishes the lawfulness of processing in cases where such processing is intended to protect the essential interest for life of data subjects or other natural persons.<\/p>\n<p style=\"text-align: justify;\">As an example, it would be valid when the processing is necessary for humanitarian purposes, including the control of epidemics and their spread. This principle of lawfulness based on the vital interest of the data subject is taken up in Article 6.1 d) of the <strong>GDPR<\/strong>. <\/p>\n<h3>Special data protection category data<\/h3>\n<p>What does it mean for personal data to be considered special category data?<\/p>\n<p style=\"text-align: justify;\">First of all, the processing of this data is prohibited, in order to avoid situations of discrimination or that violate the dignity of the person.<\/p>\n<p style=\"text-align: justify;\">However, there are exceptions to this general rule. Such prohibition may not apply in the following cases. For example:  <\/p>\n<p style=\"text-align: justify;\">&#8212; The data subject gives his explicit consent to the processing;<\/p>\n<p style=\"text-align: justify;\">&#8212; The processing is necessary for the performance of the controller&#8217;s obligations in the field of employment, with appropriate safeguards and respect for the fundamental rights and interests of data subjects;<\/p>\n<p style=\"text-align: justify;\">&#8212; When treatment is necessary for reasons of public interest in the field of public health, such as protection against serious cross-border threats to health.<\/p>\n<p style=\"text-align: justify;\">&#8212; When necessary for purposes of preventive or occupational medicine, evaluation of the worker&#8217;s ability to work, medical diagnosis, provision of health or social assistance or treatment.<\/p>\n<h3>Don&#8217;t forget to comply with data protection<\/h3>\n<p style=\"text-align: justify;\">Any processing of health data must comply with the principle of purpose and proportionality, always respecting the protection of fundamental rights and freedoms of individuals.<\/p>\n<p style=\"text-align: justify;\">To this end, the principle of data minimization will be applied, with the employer collecting data that is absolutely necessary to be able to adopt internal measures to safeguard the health of workers and reduce health risks in the workplace.<\/p>\n<p style=\"text-align: justify;\">The principle of minimization of data retention will also apply, so that the data will not be kept longer than necessary.<\/p>\n<p style=\"text-align: justify;\">The AEPD <a href=\"https:\/\/www.aepd.es\/es\" target=\"_blank\" rel=\"noopener\"><strong>AEPD<\/strong> <\/a>states in Report N\/REF.0017\/2020 in summary:<\/p>\n<p style=\"text-align: justify;\">That in a health emergency situation, the application of personal data protection regulations would allow the controller to take those decisions that are necessary to safeguard the vital interests of individuals or the safeguarding of essential interests in the field of public health.<\/p>\n<h3>Recommendation<\/h3>\n<p style=\"text-align: justify;\">In these situations, the employer must adopt all the health measures determined by the competent authorities, without forgetting the <strong>data protection <\/strong>obligations <strong>, <\/strong>avoiding claims for inadequate treatment and possible sanctions.<\/p>\n<p style=\"text-align: justify;\">If you have any doubts about how to handle your employees&#8217; personal data in health emergency situations, please contact a reputable <strong>data protection consultancy<\/strong> or contact us at <a href=\"https:\/\/businessadapter.es\/en\/\"><strong>Business Adapter data protection in Valencia<\/strong><\/a>.&nbsp;<\/p>\n<p style=\"text-align: right;\">Business Adapter&#8217;s Legal Department <\/p>\n","protected":false},"excerpt":{"rendered":"<p>Coronavirus and Data Protection In the current health emergency situation, queries related to Coronavirus and Personal Data Protection Data Protection, [&hellip;]<\/p>\n","protected":false},"author":1373,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[75],"tags":[],"class_list":["post-16765","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/businessadapter.es\/en\/wp-json\/wp\/v2\/posts\/16765","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/businessadapter.es\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/businessadapter.es\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/businessadapter.es\/en\/wp-json\/wp\/v2\/users\/1373"}],"replies":[{"embeddable":true,"href":"https:\/\/businessadapter.es\/en\/wp-json\/wp\/v2\/comments?post=16765"}],"version-history":[{"count":1,"href":"https:\/\/businessadapter.es\/en\/wp-json\/wp\/v2\/posts\/16765\/revisions"}],"predecessor-version":[{"id":16767,"href":"https:\/\/businessadapter.es\/en\/wp-json\/wp\/v2\/posts\/16765\/revisions\/16767"}],"wp:attachment":[{"href":"https:\/\/businessadapter.es\/en\/wp-json\/wp\/v2\/media?parent=16765"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/businessadapter.es\/en\/wp-json\/wp\/v2\/categories?post=16765"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/businessadapter.es\/en\/wp-json\/wp\/v2\/tags?post=16765"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}