In light of lockdown restrictions continuing to be lifted and organisations planning to reopen, the UK Information Commissioner’s Office (“ICO”) has outlined six steps businesses in the UK will need to consider when using personal data, and especially health personal data, as a part of their COVID-19 recovery plans.
The six steps do not represent new regulations but they are considerations that businesses need to keep in mind in order to demonstrate compliance with their data protection obligations under the General Data Protection Regulation and the Data Protection Act 2018.