The ICO Employment Practices Data Protection Code deals with information about workers’ health (in part 4). The code is not legally binding, but it provides clarification of the law and establishes standards which employers are expected to follow.