The Employment Practices Data Protection Code
[ch 10: pages 176-177]The Information Commissioner’s Part 4 of the Employment Practices Data Protection Code deals with information about workers’ health. As a Code of Practice it is not legally binding (see Regulations, Approved Codes of Practice and guidance, Chapter 1). However, it provides clarification of the law and establishes standards which employers are expected to follow.
The Code says obtaining details of workers’ health is “intrusive”, adding: “Workers have legitimate expectations that they can keep their personal health information private and that employers will respect their privacy”.
Employers can only gather information about workers’ health if they can satisfy a “sensitive data condition”, for example, if they need the information to meet their obligations under health and safety law or to prevent discrimination, or if a worker has given their consent freely. The Code covers the following specific areas relating to workers’ health:
• sickness and injury records;
• occupational health schemes;
• information from medical examinations and testing;
• information from drug and alcohol testing; and
• information from genetic testing.
The Employment Practices Data Protection Code — Information about workers’ health, is available from the Information Commissioner’s Office at: www.ico.org.uk/for_organisations/data_protection/topic_guides/employment
The Code restricts the scope of drug and alcohol testing at work and makes it clear that companies must not use genetic testing to predict workers’ future general health. Such testing may take place only where “a worker with a particular, detectable genetic condition is likely to pose a serious safety risk to others”, or where “it is known that a specific working environment or practice might pose specific risks to workers with particular genetic variations”.
Guidance accompanying the Code confirms the rights of safety reps, saying that they “have a legal right of access to information that they need to fulfil their functions”. Although an employer should not provide data identifying an individual worker without that worker’s consent, “the law does not prevent an employer from providing anonymised information to a safety representative”. Unions generally welcomed the Code, despite some concerns about drug testing. TUC guidance for safety reps on drug testing at work is available at: www.tuc.org.uk/workplace-issues/health-and-safety/drugs-and-alcohol/guides-and-reports-reps/drug-testing-workplace
Also see page 84 concerning a bus driver who won compensation for unfair dismissal after he was falsely accused of driving under the influence of cocaine having tested positive in a workplace drug test.