Coronavirus: are you considering temperature checks as part of your strategy to get staff back to work?

Last week, non-essential retail businesses were able to reopen to the public and it's now been confirmed other sectors such as hospitality will be able to open from Saturday 4 July.

No business can re-open until it's "covid-secure", which means that it's safe for staff and customers to return. Each business has to undertake a risk assessment and put in place steps to protect individuals from the risks of catching the disease. The government has published eight separate industry guides to help organisations prepare. None of these specifically mention taking temperature checks.

Potential benefits of using temperature checks

Temperature checks are commonly used in some countries as part of their strategies to combat the disease. According to the Centers for Disease Control and Prevention, coronavirus symptoms can develop anywhere between two and 14 days after exposure — meaning someone can have the virus and not know it. After someone is infected the virus will multiply in their body until it reaches a critical level, which causes the body to respond with symptoms. 

One of the key symptoms of coronavirus is a fever or temperature of 37.8C or higher, often accompanied by a cough or loss of the sense of smell or taste. But not everyone develops a fever and, we now know that people can be carriers without having any discernible symptoms at all. 

This means that temperature checks will not always be effective and shouldn't be used as a substitute for other measures such as observing social distancing in the workplace and making sure shared areas are cleaned more regularly.

Do employees have to comply?

Generally, you can't take anyone's temperature unless they agree - either at the time you ask them, or you can rely on an express clause in their contracts of employment. In both cases, you should explain why you want to do so, who will take their temperature, what you will do with the information and the steps you will take if their temperature is high (such as send them home).

You must not suspend, discipline or dismiss someone who refuses to be tested, unless you have a clear contractual right you can rely on. 

What will you do with the data?

If you take someone's temperature, the information you collect will be 'special category data' and is subject to important safeguards set out in the GDPR. Before you can process that information, you must 1) identify the legal basis you are relying on (Article 6 GDPR) - such as pursuing legitimate interests and, 2) identify the special condition you are relying on (Article 9 of GDPR) - such as it is necessary to use health data in order to comply with your employment obligations. Bear in mind that you can't usually rely on an employee's consent (even if freely given) in the context of an employment relationship because it's assumed that the employer has greater bargaining power than its staff. 

Some clients have asked if they can avoid GDPR concerns if they just put a tick or cross against the name of each member of staff who has had their temperature taken on a particular day to record if it was normal or high. Our view is that this will still fall within the controls of GDPR as even this limited use is 'processing' from a GPPR point of view. Even if you don't create any records at the time you make the checks, if you send someone home you will need to record the reason for their absence - and that will create a written record and is also likely to amount to processing. 

There are also other practical issues you may also have to think about, such as where the temperature checks take place. Will these take place in a public space - such as the entrance to a shop or factory? If CCTV is installed, it will create a record and that information can only be processed in accordance with GDPR.

What does the ICO say about temperature checks?

The Information Commissioner has published guidance for employers under its coronavirus recovery pages which includes separate pages on surveillance (which is where temperature checks are discussed) and testing (which provides more detailed advice on other methods of testing). 

The ICO considers that temperature testing is 'intrusive' (and almost akin to CCTV monitoring) and says that employers should only use it if it is necessary and proportionate to do so. Our view is that it won't be appropriate in those workplaces where social distancing can be maintained and other steps can be taken to reduce the risk of transmission. So, for example, it's unlikely to be proportionate to use it in an office environment, but it might be in a health setting - where the risks of exposure are much higher. 

If you are going to use temperature checks, we recommend that you undertake a data protection impact assessment (a risk assessment of what you propose to do from a data protection point of view). The assessment will need to set out:

• the activity being proposed
• the data protection risks
• whether that activity is necessary and proportionate
• the mitigating actions you can put in place to counter the risks and
• a plan or confirmation that mitigation has been effective

A checklist and template of a date protection impact assessment is available here.

You must also be very clear, open and honest with your employees about how you are going to use their personal data, the decisions you will make with that information and how long you intend to keep it. 

Our Coronavirus updates

We're working hard to keep you up to date with legal developments around Coronavirus. We've set up a portal which includes lots of helpful articles and advice to help you.

If you have a query, that we haven't answered, please contact us.