coronavirus/covid-19 · may 4, 2020: faq on distance learning, employment related, health research...

18
w ww.cov .com As the legal, regulatory, and commercial implications of coronavirus COVID-19 continue to evolve, our lawyers and advisors are helping clients to navigate the complex considerations that companies around the world are facing and develop plans and strategies in response. Our Privacy & Cyber team has assembled an overview of guidance documents issued by regulators. For additional materials, please visit our COVID- 19 Legal and Business Toolkit or reach out to us at [email protected]. EEA Countries European Data Protection Board - European Commission - eHealth Network - Council of Europe - Austria - Belgium - Bulgaria - Cyprus - Croatia - Czech Republic - Denmark - Estonia - Finland - France - Germany - Greece - Hungary - Iceland - Ireland - Italy - Latvia - Lichtenstein - Lithuania - Luxembourg - Malta - Netherlands - Norway - Romania - Slovakia - Slovenia - Spain - Sweden - Poland - Portugal - United Kingdom If you have any questions concerning the material discussed in this client alert, please contact the following members of our Data Privacy and Cybersecurity practice: Daniel Cooper +32 2 545 75 27 [email protected] Anna Sophia Oberschelp de Meneses +32 2 549 52 49 [email protected] This information is not intended as legal advice. Readers should seek specific legal advice before acting with regard to the subjects mentioned herein. Covington & Burling LLP, an international law firm, provides corporate, litigation and regulatory expertise to enable clients to achieve their goals. This communication is intended to bring relevant developments to our clients and other interested colleagues. Please send an email to [email protected] if you do not wish to receive future emails or electronic alerts. Coronavirus/COVID-19 Data Privacy Guidance

Upload: others

Post on 22-Jun-2020

2 views

Category:

Documents


0 download

TRANSCRIPT

w ww.cov .com

As the legal, regulatory, and commercial implications of coronavirus COVID-19 continue to evolve, our lawyers and advisors are helping clients to navigate the complex considerations that companies around the world are facing and develop plans and strategies in response. Our Privacy & Cyber team has assembled an overview of guidance documents issued by regulators. For additional materials, please visit our COVID-19 Legal and Business Toolkit or reach out to us at [email protected].

EEA Countries

European Data Protection Board - European Commission - eHealth Network - Council of Europe - Austria - Belgium - Bulgaria - Cyprus - Croatia - Czech Republic - Denmark - Estonia - Finland - France - Germany - Greece - Hungary - Iceland - Ireland - Italy - Latvia - Lichtenstein - Lithuania - Luxembourg - Malta - Netherlands - Norway - Romania - Slovakia - Slovenia - Spain - Sweden - Poland - Portugal - United Kingdom

If you have any questions concerning the material discussed in this client alert, please contact the following members of our Data Privacy and Cybersecurity practice:

Daniel Cooper +32 2 545 75 27 [email protected] Anna Sophia Oberschelp de Meneses +32 2 549 52 49 [email protected]

This information is not intended as legal advice. Readers should seek specific legal advice before acting with regard to the subjects mentioned herein. Covington & Burling LLP, an international law firm, provides corporate, litigation and regulatory expertise to enable clients to achieve their goals. This communication is intended to bring relevant developments to our clients and other interested colleagues. Please send an email to [email protected] if you do not wish to receive future emails or electronic alerts.

Coronavirus/COVID-19

Data Privacy Guidance

1

EEA Countries

Country Link to the statements on data protection and COVID-19

by data protection authorities Tags

European Data

Protection Board

March 16, 2020: Statement of the Chair on preparing guidelines at EU level Miscellaneous

March 19, 2020: Statement on the processing of personal data in the context of the

COVID-19 outbreak

Miscellaneous

April 7, 2020: EDPB announces that it will issue data protection guidance on

geolocation and other tracing tools and processing of health data for research

purposes

Miscellaneous

April 14, 2020: Letter on the draft Guidance on apps supporting the fight against

COVID-19 pandemic

Contact Tracing Apps

April 21, 2020: Guidelines 03/2020 on the processing of data concerning health for

the purpose of scientific research in the context of the COVID-19 outbreak

Contact Tracing Apps

April 21, 2020: Guidelines 04/2020 on the use of location data and contact tracing

tools in the context of the COVID-19 outbreak

Contact Tracing Apps

April 24, 2020: EDPB response to the US Mission to the EU on the transfer of

personal data for the purpose of scientific research and the development of vaccines

and treatments to combat COVID-19

Contact Tracing Apps

April 24, 2020: EDPB response to Mrs Ďuriš Nicholsonová and Mr Jurzyca's letter

on common guidance in the fight against the COVID-19 pandemic

Contact Tracing Apps

April 24, 2020: EDPB Response to the MEP Sophie in't Veld's letter on the use of

apps in fight against coronavirus

Contact Tracing Apps

May 8, 2020: EDPB adopts letter on Polish presidential elections data disclosure &

discusses recent Hungarian government decrees in relation to the coronavirus

during the state of emergency

Contact Tracing Apps

June 3, 2020: EDPB response to NGOs on Hungarian Decrees and statement on

Article 23 GDPR

Miscellaneous

2

EEA Countries

Country Link to the statements on data protection and COVID-19

by data protection authorities Tags

European

Commission

April 16, 2020: Guidance on Apps supporting the fight against COVID 19 pandemic

in relation to data protection

Contact Tracing Apps

eHealth Network April 15, 2020: Common EU Toolbox for Member States on mobile applications to

support contact tracing in the EU’s fight against COVID-19

Contact Tracing Apps

Council of Europe April 28, 2020: Statement on contact tracing apps Contact Tracing Apps

Austria March 27, 2020: Statement on COVID-19 measures in the employment context Employment

March 27, 2020: Statement on information security in the context of homeworking Homeworking

March 27, 2020: Template for the collection of contact information of employees to

be able to contact them relating to COVID-19 announcements

Employment

March 27, 2020: FAQ on COVID-19 in the employment context Employment

Belgium March 13, 2020 (updated April 2, 2020): Statement of COVID-19 measures in the

employment context

Employment

March 2020: Statement on self-assessment apps Self-Assessment Apps

April 28, 2020: Opinion on draft law on a database used for contact tracing apps Contact Tracing Apps

April 29, 2020: Opinion on draft law on a database used for contact tracing apps Contact Tracing Apps

April 30, 2020: Statement on Contact Tracing Apps Contact Tracing Apps

June 5, 2020: Guidance on temperature screening in the context of a return to work

scenario

Return to Work

Bulgaria March 13, 2020: Statement about measures implemented by the Supervisory

Authority regarding COVID-19 (including temperature screening) (new statement on

May 15, 2020)

Miscellaneous

March 25, 2020: Statement about the legality of the processing of personal data by

the Ministry of Interior collected at checkpoints

Miscellaneous

Cyprus April 24, 2020: Statement on thermal cameras Thermal cameras

May 12, 2020: Statement on distance learning Distance Learning

3

EEA Countries

Country Link to the statements on data protection and COVID-19

by data protection authorities Tags

May 20, 2020: Statement on conducting exams remotely

May 21, 2020: Statement on distance learning

Croatia March 18, 2020: Statement on COVID-19 measures in the employment context Employment

March 20, 2020: Warning regarding phishing activities related to COVID-19 Cybercrime

May 7, 2020: Statement criticizing the recommendation of public health authorities

to service providers for service providers to collect the contact information of all

persons to whom they have come into close proximity in the context of the provision

of the services

Back to work

Czech Republic March 13, 2020: General statement on COVID-19 measures Miscellaneous

March 13, 2020: FAQ on COVID-19 measures in different areas Miscellaneous

Employment

April 22, 2020: Statement on how to inform the public about COVID-19 victims Public Disclosure

April 2, 2020: Statement on the emergency measure of the Ministry of Health in

connection with the project “smart quarantine”

Contact Tracing Apps

April 3, 2020: Statement on information security in the context of homeworking Homeworking

April 11, 2020: Statement on the emergency measure of the Ministry of Health in

connection with the project “smart quarantine”

Contact Tracing Apps

May 12, 2020: Statement on temperature screening at the workplace (and updated

FAQ on COVID-19 measures in the employment context)

Return to Work

Denmark March 5, 2020: Statement on COVID-19 measures in the employment context Employment

March 16, 2020: Guidance on information security in the context of homeworking Homeworking

March 31, 2020: Centre for Cyber Security’ Guidance on homeworking Homeworking

April 2, 2020: Statement on sharing health information with websites and apps Miscellaneous

April 17, 2020: Statement on contact tracing apps Contact Tracing Apps

Estonia March 16, 2020: Statement on COVID-19 measures in the employment context Employment

4

EEA Countries

Country Link to the statements on data protection and COVID-19

by data protection authorities Tags

March 20, 2020: FAQ on COVID-19 measures in the employment context Employment

March 25, 2020: Guidance on distance learning Distance Learning

Finland March 12, 2020: Statement on COVID-19 measures in the employment context Employment

March 23, 2020: FAQ on COVID-19 measures in the employment context Employment

France March 2020: Statement on COVID-19 measures in the employment context Employment

April 1, 2020: Guidance on information security in the context of homeworking

Another Guidance on IT security when teleworking

Homeworking

March 19, 2020: Guidance on the government sending SMS messages to citizens Miscellaneous

March 26, 2020: Guidance relating to health research on COVID-19 Health Research

April 8, 2020: Guidance on distance learning Distance Learning

April 8, 2020: Statement by the President before the French Parliament Miscellaneous

April 9, 2020: Guidance on video-conferencing tools Information Security

April 14, 2020: Guidance on processing of personal data by public authorities (city

councils)

Miscellaneous

April 17, 2020: Statement relating to the French Supervisory Authorities priorities

during the COVID-19 crises

Miscellaneous

April 22, 2020: Statement regarding the Decree framing the organizational and

operational measures of the health system necessary to deal with the COVID-19

epidemic in the context of the state of health emergency

Miscellaneous

April 26, 2020: Statement on the COVID-10 contact tracing mobile application

“StopCOVID”

Contact Tracing Apps

May 1, 2020: Statement on processing personal data in the context of distributing

masks

Miscellaneous

May 7, 2020: Statement on COVID-19 measures in the employment context in a

return to work scenario

Return to Work

5

EEA Countries

Country Link to the statements on data protection and COVID-19

by data protection authorities Tags

May 13, 2020: Statement on the system of health surveys and epidemiological

monitoring the Government intends to implement

Miscellaneous

May 18, 2020: Statement on the use of drones to control the COVID-19 measures in

Paris

Miscellaneous

May 20, 2020: Statement on supervising online exams Distance Learning

May 26, 2020: Statement on the decree that shall approve a contact tracing app

called StopCovid

Contact Tracing Apps

June 4, 2020: Statement announcing that the French Supervisory Authority will carry

out checks relating to the contact tracing tools SI-DEP, Contact Covid and

StopCovid

Contact Tracing Apps

June 5, 2020: FAQ on the contact tracing app called StopCovid Contact Tracing Apps

Germany Konferenz der

unabhängigen

Datenschutzaufsichtsbe

hörden des Bundes und

der Länder

(Datenschutzkonferenz)

March 13, 2020: Statement on COVID-10

measures in the employment context

Employment

April 3, 2020: Statement on data protection

aspects of COVID-19 measures

Miscellaneous

April 3, 2020: Statement on the fundamental

principles to take into account in combatting

COVID-19

Miscellaneous

Federal Supervisory

Authority

April 7, 2020: Statement on contact tracing app Contact Tracing Apps

March 2020: Compilation of guidance released by

the other authorities

Miscellaneous

March 23, 2020: Opinion on the law on the

protection against infections

Miscellaneous

Baden Wuerttemberg March 13, 2020: FAQ of the Data Protection

Authority of Baden Wuerttemberg

Employment

6

EEA Countries

Country Link to the statements on data protection and COVID-19

by data protection authorities Tags

March 19, 2020: Statement on distance learning Distance Learning

April 17, 2020: Guidance on privacy-friendly

means of communication

Information Security

April 29, 2020: Statement on distance learning Distance Learning

Bavaria March 2020: Statement on COVID-19 measures Miscellaneous

Berlin March 31, 2020: Guidance by the Supervisory of

Berlin on home working

Homeworking

April 3, 2020: Guidance on distance learning Distance Learning

May 4, 2020: Statement on communication means

including videoconferencing systems and checklist

Information Security

Brandenburg March 23, 2020: Guidance on information security

in the context of homeworking

Homeworking

March 23, 2020: Statement on distance learning Distance Learning

Hamburg March 27, 2020: FAQ on several issues including

COVID-19 measures in the employment context

Employment

Mecklenburg-

Vorpommern

May 9, 2020: Statement on COVID-19 measures

in an return to work scenario

Miscellaneous

North Rhine-Westphalia March 2020: Statement on the use of messenger

services in schools

Distance Learning

March 2020: Statement on information security in

the context of homeworking

Homeworking

March 23, 2020: Statement on the creation of

customer lists by restaurants

Miscellaneous

April 2020: Statement on how to appropriately

implement the COVID-19 measures

Miscellaneous

7

EEA Countries

Country Link to the statements on data protection and COVID-19

by data protection authorities Tags

April 7, 2020: Statement on transfers of health

data to the police

Miscellaneous

April 20, 2020: Statement on distance learning Distance Learning

May 2020: Guidance for hairdressers who have to

obtain the contact information of all clients

Miscellaneous

Rhineland-Palatinate March 16, 2020: FAQ on COVID-19 measures in

the employment context

Employment

March 18, 2020: Statement on distance learning Distance Learning

March 31, 2020: Statement on whether cell phone

data can help fight COVID-19

Telecom Data

April 8, 2020: Statement on information security Information Security

Sachsen March 2020: Statement on COVID-19 measures Miscellaneous

March 2020: Statement on COVID-19 measures in

employment context

Employment

March 2020: Statement on COVID-19 measures in

relation to customers and visitors

Miscellaneous

April 2020: Statement on information security in

the context of homeworking

Homeworking

April 2020: Statement on the obligations of

healthcare professionals to report positive cases to

health authorities

Miscellaneous

April 2020: Statement on the permitted measures

by the state and municipalities in the interest of

infection protection

Miscellaneous

8

EEA Countries

Country Link to the statements on data protection and COVID-19

by data protection authorities Tags

April 2020: Statement on the use of telecom data

to control the spread of COVID-19

Telecom Data

Sachsen-Anhalt March 2020: Statement on COVID-19 measures in

the employment context

Miscellaneous

March 2020: Statement on information security in

the context of homeworking

Homeworking

March 2020: Statement on COVID-19 measures in

the employment context

Employment

Schleswig-Holstein March 17, 2020: Statement and press release of

the Independent Data Protection Authority of

Miscellaneous

March 18, 2020: Statement on the registration

obligations of service providers to districts and

cities

Miscellaneous

March 23, 2020: Statement on contact tracing

apps and data protection by design

Contact Tracing Apps

March 24, 2020: Guidance on information security

in the context of homeworking

Homeworking

April 29, 2020: Statement on videoconferencing

apps

Information Security

May 4, 2020: Statement on COVID-19 SPAM Information Security

Thueringen April 2020: FAQ on several issues Miscellaneous

April 2020: Opinion by the Lawyer Association on

contact tracing apps

Contact Tracing Apps

April 16, 2020: Reference to study on the meaning

of “anonymous”

Contact Tracing Apps

9

EEA Countries

Country Link to the statements on data protection and COVID-19

by data protection authorities Tags

April 27, 2020: Reference to study on the meaning

of “voluntary”

Contact Tracing Apps

April 29, 2020: Statement on distance learning Distance Learning

Federal Office for

Information Technology

Security

March 18, 2020: Guidance on information security

in the context of homeworking

Homeworking

German Computer

Scientists Forum for

Peace and Social

Responsibility

April 29, 2020: DPIA on contact tracing app Contact Tracing Apps

Greece March 18, 2020: Statement on COVID-19 measures in the employment context Employment

March 23, 2020: Statement on COVID-19 measures in the employment context Employment

April 15, 2020: Guidance on information security in the context of homeworking Homeworking

Hungary March 10, 2020: Statement on COVID-19 measures in the employment context Employment

May 5, 2020: Derogations from certain data protection provisions Miscellaneous

May 4, 2020: Decree published by the Government that suspends the GDPR data

subjects rights

Miscellaneous

Iceland March 13, 2020: Statement on COVID-19 measures in the employment context and

homeworking

Employment

Homeworking

Ireland March 6, 2020: Statement on data protection principles and COVID-19 related

processing

Miscellaneous

March 12, 2020: Guidance on information security in the context of homeworking Homeworking

March 25, 2020: Guidance on COVID-19 and subject access requests Miscellaneous

March 26, 2020: Tips for Staying Safe Online Information Security

April 3, 2020: Tips for video-conferencing Information Security

10

EEA Countries

Country Link to the statements on data protection and COVID-19

by data protection authorities Tags

Italy February 2, 2020: Opinion on draft order with urgent measures on COVID-19 Miscellaneous

March 2, 2020: Against private initiatives to collect health data Employment

March 14, 2020: Government's Joint Protocol Employment

March 19, 2020: Methods of delivery of issuing electronic medical prescription Miscellaneous

March 25, 2020: Statement on COVID-19 apps Contact Tracing Apps

March 26, 2020: Statement on distance learning Distance learning

March 31, 2020: Statement on sharing personal data of infected persons on social

media

Miscellaneous

April 2, 2020: How pharmacies can issue electronic prescriptions Miscellaneous

April 7, 2020: Statement on contact tracing apps Contact Tracing Apps

April 8, 2020: Statement on contact tracing apps and other technologies Contact Tracing Apps and

other technologies

April 16, 2020: Statement on contact tracing apps Contact Tracing Apps

April 16, 2020: Statement on videoconferencing tools in judicial trials Miscellaneous

April 28, 2020: Statement on data transfers between state authorities to implement

economic support measures

Miscellaneous

April, 2020 (last updated May 7): Compilation of the main provisions in the

emergency legislation with a data protection impact

Miscellaneous

April 29, 2020: Statement on contact tracing apps Contact Tracing Apps

May 4, 2020: FAQ on distance learning, employment related, health research and

measures taken my local authorities

Distance Learning

Employment

Health Research

May 13, 2020: Statement on suitable actions to deal with crisis situations and the

need to guarantee health security in the workplace

Employment

11

EEA Countries

Country Link to the statements on data protection and COVID-19

by data protection authorities Tags

May 14, 2020: Statement that provides that the employer cannot directly carry out

diagnostic tests on employees

Employment

May 14, 2020: Statement on the employer testing employees Employment

June 1, 2020: Statement on the contact tracing app called “Immune App” Contact Tracing

June 5, 2020: Interview with the President of the Italian Supervisory Authority about

the “Immune App”

Contact Tracing

Latvia March 17, 2020: Statement on COVID-19 measures in the employment context Employment

March 20, 2020: Statement on the disclosure of health data Public Disclosure

April 3, 2020: Statement on phishing Information Security

June 2, 2020: Statement on processing in the context of return to work measures Return to Work

June 5, 2020: Statement on the contact tracing app “Stop Covid” Contact Tracing

Lichtenstein March (updated April 9, 2020): Statement on COVID-19 measures in the

employment context

Employment

March 20, 2020: Guidance on information security in the context of homeworking Homeworking

Lithuania March 20, 2020 (updated April 22, 2020): Statement on COVID-19 measures in the

employment context

Employment

April 14, 2020: Guidance on processing of occupational health data Employment

Luxembourg March 10, 2020: Statement on COVID-19 measures in the employment context Employment

Malta March 202, 2020: Statement on COVID-19 more generally Miscellaneous

Netherlands March 2020 (last updated April 24, 2020): Statement on COVID-19 measures in

the employment context

Employment

March 18, 2020: Guidance on information security in the context of homeworking Homeworking

March 20, 2020: Statement on enforcement during COVID-19 crises Miscellaneous

April 1, 2020: Statement on using telecom data to fight COVID-19 Telecom Data

April 2, 2020: Statement on accessing patients files Miscellaneous

12

EEA Countries

Country Link to the statements on data protection and COVID-19

by data protection authorities Tags

April 8, 2020: Statement on COVID-19 apps Contact Tracing Apps

April 15, 2020: Guidance on video calling apps Information Security

April 17, 2020: Statement on COVID-19 apps Contact Tracing Apps

April 20, 2020: Statement on COVID-19 apps Contact Tracing Apps

April 23, 2020: Statement on data collection in the context of homeschooling Distance Learning

April 24, 2020: Statement on temperature measurement Employment

May 20, 2020: Statement about the proposed changes to the Telecommunications

Act to make it possible to share telecom data in the fight against COVID-19

Miscellaneous

May 29, 2020: Second statement about the proposed changes to the

Telecommunications Act to make it possible to share telecom data in the fight

against COVID-19

Miscellaneous

Norway March 2020: Statement on COVID-19 measures in the employment context Employment

March 19, 2020: Guidance on information security in the context of homeworking Homeworking

April 16, 2020: Statement on the Infect Stop app Contact Tracing Apps

April 17, 2020: Statement on COVID-19 apps Contact Tracing Apps

April 23, 2020: Statement on the use of a IT system to collect and store applications

for benefits requested in relation to COVI-19

Miscellaneous

April 27, 2020: Statement on the investigation by the Danish Supervisory Authority

of the Smit Stop app

Contact Tracing Apps

May 12, 2020: Statement about shortcomings of the contact tracing app called

“infect Stop”

Contact Tracing Apps

June 2, 2020: Statement on the self-assessment app “World Citizen Report” Self-Assessment Apps

Romania March 18, 2020: Statement on COVID-19 measures in the employment context Employment

Slovakia March 13, 2020: Statement on COVID-19 measures in the employment context Employment

April 16, 2020: Statement on the "smart quarantine" project Contact Tracing Apps

13

EEA Countries

Country Link to the statements on data protection and COVID-19

by data protection authorities Tags

April 17, 2020: Opinion on temperature screening of employees and building visitors Employment

Slovenia March 12, 2020: Statement on responsible behavior in times of crises Miscellaneous

March 12, 2020: Statement on cyberattacks Information Security

March 17, 2020: Statement on notification in case of virus outbreak amongst

students

Miscellaneous

March 18, 2020: Statement on keeping appropriate data protection standards Miscellaneous

March 18, 2020: Statement on the transmission of data from the register of doctors

to the Ministry of Health

Miscellaneous

March 19, 2020: Statement on temperature screening of employees Employment

March 20, 2020: Statement on content to access digital classrooms Distance Learning

March 20, 2020: Statement on the notification of COVID-19 infection to the

employer

Employment

March 23, 2020: Statement on informing citizens about the temporary ban on public

gatherings vis SMS

Miscellaneous

March 24, 2020: Statement on online psychotherapeutic therapy Miscellaneous

March 24, 2020: Statement on the obligation to report individual outbreaks of

COVID-19

Employment

March 24, 2020: Open letter on COVID-19 location tracking measures by the

Government

Location Tracking

Measures

March 25, 2020: Statement on the legal bass to processes geolocation data Location Tracking

Measures

March 25, 2020: Statement on data processing by occupational health providers Employment

March 26, 2020: Press release regarding the processing of personal data through

the independent website for the collection and display of information about COVID-

19 infection

Self-Assessment Apps

14

EEA Countries

Country Link to the statements on data protection and COVID-19

by data protection authorities Tags

March 26, 2020: Statement on sending electronic sick leaves by email Employment

March 27, 2020: Letter to the Minister on COVID-19 measures Miscellaneous

March 27, 2020: Statement on the identification of applicants in cases where

applicant does not use electronic signature in administrative proceedings

Miscellaneous

March 30, 2020: Statement on the disclosure of data on sick employees Employment

March 30, 2020: Statement on the transfer of telephones to the employees’ private

telephones

Employment

March 30, 2020: Statement on using personal data to prepare COVID-19 measures

in different sectors

Miscellaneous

March 30, 2020: Statement on how an epidemic must not be a reason for abolishing

constitutional rights

Miscellaneous

April 2, 2020: Statement on the DPIA conducted on COVID-19 application Contact Tracing Apps

April 2, 2020: Implementation of Article 2.a of the Decree on the temporary

prohibition of offering and selling goods and services to consumers in the Republic

of Slovenia

Miscellaneous

April 3, 2020: Opinion on the anonymization of health data by applications Contact Tracing Apps

April 3, 2020: Opinion on safe channels for communication with patients Information Security

April 6, 2020: Statement on distance learning Distance Learning

April 7, 2020: Statement on information security in the context of homeworking Homeworking

April 10, 2020: Statement on tracking individuals that were tested positive via

mobile phone applications

Miscellaneous

April 10, 2020: Statement on commercial establishments giving priority to vulnerable

persons and asking for respective personal data (e.g., proof of age)

Miscellaneous

April 15, 2020: Statement on using video-conferencing tools for distance learning Distance Learning

15

EEA Countries

Country Link to the statements on data protection and COVID-19

by data protection authorities Tags

April 17, 2020: Statement on processing personal data of teaches and keeping

records of lessors

Distance Learning

April 17, 2020: Statement on health monitoring applications deployed by employers Employment

April 20, 2020: Statement on testing for corona virus infection for research purposes Health Research

April 21, 2020: Statement on the collection of data from external service providers Employment

April 22, 2020: Employee monitoring during times of homeworking Employment

May 6, 2020: Questionnaires and declarations in a return to work scenario Return to Work

May 21, 2020: The use of thermal cameras to measure body temperature Return to Work

Spain March 12, 2020: Statement on COVID-19 measures in the employment context

March 12, 2020: Report

Employment

March 13, 2020: FAQ on COVID-19 measures in the employment context Employment

March 16, 2020: Statement on COVID-19 self-assessment apps and websites Self-Assessment

March 26, 2020: Guidance on COVID-19 self-assessment apps and websites Self-Assessment

April 3, 2020: Statement on information security in the context of homeworking Homeworking

May 7, 2020: Guidance that analyses the different technologies used to combat the

spread of COVI-19

Contact Tracing Apps and

Other Technology

May 9, 2020: Statement on the use of facial recognition of students to confirm their

identity in order to participate in exams

Miscellaneous

Sweden March 13, 2020: Statement on COVID-19 measures in the employment context Employment

March 27, 2020: Statement on using contact tracking technologies Contact Tracing Apps

Poland March 12, 2020: Statement on COVID-19 measures in the employment context Employment

March 17, 2020: Guidance on information security in the context of homeworking Homeworking

March 27, 2020: Statement on measures taken by the Chief Sanitary Inspector Miscellaneous

March 31, 2020: Statement on distance learning Distance Learning

16

EEA Countries

Country Link to the statements on data protection and COVID-19

by data protection authorities Tags

April 21, 2020: Statement on investigation of data breach relating to the public

disclosure of a list of persons in quarantine

Miscellaneous

April 21, 2020: Statement on exchanging results of COVID-19 tests and the need to

ensure IT security

Miscellaneous

May 4, 2020: Statement on paper documentation in times of COVID-19 Homeworking

May 5, 2020: Statement on temperature measurement of employees and premise

visitors

Employment

Return to work

May 7, 2020: Sharing medical records during the COVID-19 crises Miscellaneous

May 14, 2020: Statement on video conferencing tools Homeworking

Portugal April 2, 2020: Statement on the use of CCTV and private security agents to enforce

COVID-19 measures implemented by the Government

Miscellaneous

April 9, 2020: Guidance on distance learning Distance Learning

April 17, 2020: Guidance on the use of software to control the employees' work

performance at a distance

Employment

April 22, 2020: Guidance on disclosing information about infected persons Public Disclosure

April 23, 2020: Statement of COVID-19 measures in the employment context Employment

Return To Work

April 30, 2020: Questions to the Portuguese Supervisory Authority by a MP

regarding its statement of COVID-19 measures in the employment context (in

particular temperature screening)

Employment

Return To Work

May 12, 2020: Answers by the Portuguese Supervisory Authority to the questions

made by the MP regarding its statement of COVID-19 measures in the employment

context

Employment

Return To Work

May 19, 2020: Statement on the temperature measurement of students Miscellaneous

May 22, 2020: Statement on distance learning Miscellaneous

17

EEA Countries

Country Link to the statements on data protection and COVID-19

by data protection authorities Tags

United Kingdom

March 2020: Guidance on FOIA and COVID-19 Miscellaneous

March 12, 2020: Q&A regarding COVID-19 Employment

March 26, 2020: Blog post on community groups and COVID-19 Miscellaneous

March 28, 2020: Statement in response to the use of mobile phone tracking data to

help during the coronavirus crises

Telecom Data

April 8, 2020: Statement on investigating COVID-19 scams Information Security

April 15, 2020: Guidance on how the UK ICO will regulate during coronavirus Miscellaneous

April 15, 2020: Guidance on video-conferencing Information Security

April 17, 2020: Statement compiling a series of simple questions to those using new

technologies (including contact tracing technology) might ask themselves

Contact Tracing Apps and

other technology

May 4, 2020: Statement on contact tracing app Contact Tracing Apps

May 5, 2020: Statement on priorities for UK data protection during COVID-19 and

beyond

Miscellaneous

May 6, 2020: DPIA on the NHSX contact tracing app Contact Tracing Apps

May 7, 2020: Statement in response to details about an NHSX contact tracing app to

help deal with the COVID-19 pandemic

Contact Tracing Apps