Coronavirus/COVID-19 and data protection compliance

In these challenging times, many organisations are finding compliance with data protection law more difficult. Staff absences and homeworking, as well as the need to share health-related information, mean that normal policies and procedures are harder to follow. 

UK regulator, the ICO, has offered advice on how to deal with some of the data protection issues that are coming up, as well as offering comfort about the approach they are taking to enforcement.

We review recent guidance here.

EU co-ordination body, the EDPB, has issued a formal statement recognising the need for exceptional measures to meet the crisis. However, the statement emphasises the need for any exceptional measures to be proportionate and limited to the emergency period.

Similarly, steps taken by employers to gather and disclose health information should be kept to a minimum. 

Our content explained

Every piece of content we create is correct on the date it’s published but please don’t rely on it as legal advice. If you’d like to speak to us about your own legal requirements, please contact one of our expert lawyers.

Posted by


Mills & Reeve Sites navigation
A tabbed collection of Mills & Reeve sites.
My Mills & Reeve navigation
Subscribe to, or manage your My Mills & Reeve account.
My M&R


Register for My M&R to stay up-to-date with legal news and events, create brochures and bookmark pages.

Existing clients

Log in to your client extranet for free matter information, know-how and documents.


Mills & Reeve system for employees.