5 • Return-to-work programs add new challenges
As businesses contemplate employees returning to offices, factories, and retail and service locations, many are considering how to keep workers and visitors safe from exposure to COVID-19. As part of this process, many businesses are taking employee temperatures, and others are asking employees to provide medical information in the form of health histories and current health attestations.
Depending on applicable law, the collection and retention of this personal information may require notice to employees. The CCPA, for instance, requires that businesses notify workers and consumers of the personal information that the business collects about them and the business or commercial purpose for which the information will be used. The GDPR likewise requires that the data controller inform individuals of the purpose of processing the data, along with the legal basis for processing the data.
As employers collect more personal information from employees, data privacy notices and policies will require updating to keep pace with collection practices and to ensure secure handling of sensitive data.
These five key takeaways are just the highlights of our in-depth panel discussion. To listen to our full conversation on data privacy in this new world, check out our full panel discussion here.