ICO就新冠疫情防护发布的数据保护指南

ICO就新冠疫情防护发布的数据保护指南

Data protection and coronavirus: what you need to know
数据保护与新冠疫情：您应知道的事

The ICO recognises the unprecedented challenges we are all facing during the Coronavirus (COVID-19) pandemic.
ICO认识到我们在新型冠状病毒（COVID-19）疫情蔓延期间所面临的前所未有的挑战。
We know you might need to share information quickly or adapt the way you work. Data protection will not stop you doing that. It’s about being proportionate - if something feels excessive from the public’s point of view, then it probably is.
我们知道您可能需要快速共享信息或适应您的工作方式。数据保护不会阻止您去做这些事情。这要遵循比例原则，如果从公众的视角来看某件事感觉是过分的，那可能就是过分的。
And the ICO is here to help – please see below for answers to the questions we’re being asked. If you need more help, call us on 0303 123 1113.
ICO可以为您提供帮助-请在下方查看我们提出的问题的答案。如果您需要更多帮助，请致电0303 123 1113。
During the pandemic, we are worried that our data protection practices might not meet our usual standard or our response to information rights requests will be longer. Will the ICO take regulatory action against us?
在疫情期间，我们担心我们的数据保护实践可能不符合我们通常的标准，我们对信息权利请求的回应可能会更长。ICO将对我们采取监管行动吗？
No. We understand that resources, whether they are finances or people, might be diverted away from usual compliance or information governance work. We won’t penalise organisations that we know need to prioritise other areas or adapt their usual approach during this extraordinary period.
不。我们理解无论是在财力还是人力方面，组织都可能会从常规合规或信息治理工作中转移出来。在此特殊时期，我们不会惩罚组织，我们知道组织需要优先考虑其他领域或调整其惯常做法。
We can’t extend statutory timescales, but we will tell people through our own communications channels that they may experience understandable delays when making information rights requests during the pandemic.
我们无法延长法定的时限，但是我们会通过自己的信息渠道告诉人们，在疫情期间提出信息权利请求时，他们可能会遇到能够理解的延迟。
As a healthcare organisation, can we contact individuals in relation to COVID-19 without having prior consent?
作为医疗机构，我们是否可以在未经事先同意的情况下就COVID-19与个人联系？
Data protection and electronic communication laws do not stop Government, the NHS or any other health professionals from sending public health messages to people, either by phone, text or email as these messages are not direct marketing. Nor does it stop you using the latest technology to facilitate safe and speedy consultations and diagnoses. Public bodies may require additional collection and sharing of personal data to protect against serious threats to public health.
数据保护和电子通信法不会阻止政府、NHS或任何其他卫生专业人员通过电话，短信或电子邮件向人们发送公共卫生信息，因为这些信息不是直接营销。它也不会阻止您使用最新技术来促进安全、迅速的咨询和诊断。公共机构可能需要额外收集和共享个人数据，以防止对公共健康的严重威胁。
More of our staff will be homeworking during the pandemic. What kind of security measures should my organisation have in place for homeworking during this period?
疫情期间，我们的更多员工将在家办公。在此期间，我的组织应为在家办公采取何种安全措施？
Data protection is not a barrier to increased and different types of homeworking. During the pandemic, staff may work from home more frequently than usual and they can use their own device or communications equipment. Data protection law doesn’t prevent that, but you’ll need to consider the same kinds of security measures for homeworking that you’d use in normal circumstances.
数据保护不增设在家办公的障碍。在疫情期间，员工在家工作的频率可能会比平时更高，并且他们可以使用自己的设备或通讯设备。数据保护法并不阻止这种情况，但是您需要考虑在正常情况下使用的在家办公的安全措施。
Can I tell my staff that a colleague may have potentially contracted COVID-19?
我能告诉我的员工，某位同事可能感染了COVID-19吗？
Yes. You should keep staff informed about cases in your organisation. Remember, you probably don’t need to name individuals and you shouldn’t provide more information than necessary. You have an obligation to ensure the health and safety of your employees, as well as a duty of care. Data protection doesn’t prevent you doing this.
是的，您应该让工作人员了解组织中的感染情形。但您需记得，您可能不需要直接披露出个人的姓名，并且不应提供不必要的更多信息。您有义务确保员工的健康和安全，并有防护义务。数据保护并不能阻止您这样做。
Can I collect health data in relation to COVID-19 about employees or from visitors to my organisation? What about health information ahead of a conference, or an event?
我是否可以收集与COVID-19有关的员工健康数据或从组织的访客的健康数据？参加会议或活动的健康信息呢？
You have an obligation to protect your employees’ health, but that doesn’t necessarily mean you need to gather lots of information about them.
您有义务保护员工的健康，但这并不一定意味着您需要收集有关他们的大量信息。
It’s reasonable to ask people to tell you if they have visited a particular country, or are experiencing COVID-19 symptoms.
询问人们是否曾经去过特定国家或正在出现COVID-19症状的做法是合理的。
You could ask visitors to consider government advice before they decide to come. And you could advise staff to call 111 if they are experiencing symptoms or have visited particular countries. This approach should help you to minimise the information you need to collect.
您可以要求访客在决定拜访之前考虑政府的建议。您也可以建议员工在有症状时或去过特定国家时致电111。此方法应帮助您最大程度地减少需要收集的信息。
If that’s not enough and you still need to collect specific health data, don’t collect more than you need and ensure that any information collected is treated with the appropriate safeguards.
如果这还不够，并且您仍然需要收集特定的健康数据，请不要收集超出您需要的数据，并确保所收集的任何信息都得到了适当的保护。
Can I share employees’ health information to authorities for public health purposes?
我可以出于公共健康目的与监管机关共享员工的健康信息吗？
Yes. It’s unlikely your organisation will have to share information with authorities about specific individuals, but if it is necessary then data protection law won’t stop you from doing so.

是。虽然您的组织不太可能需要与监管机关共享有关特定个人的信息，但是如果有必要，那么数据保护法将不会阻止您这样做。

斐石律师事务所北京斐石律师事务所(“斐石中国”)成立于2008年，目前包括北京、上海和广州三个办公室。作为斐石国际律师事务所的重要组成部分，斐石中国可以为中国企业走出去提供真正的全球一体化一站式法律服务。无论您是大型跨国公司还是初创企业，斐石中国都拥有专业的法律团队、丰富的经验和耐心周到的服务，为您在纷繁复杂的商业环境中保驾护航。

斐石中国是斐石国际律师事务所全球网络的重要组成部分，斐石国际律师事务所成立于1835年，是一家总部位于英国伦敦的大型国际律师事务所。目前已经在英国、德国、法国、意大利、西班牙、比利时、荷兰、美国、爱尔兰及中国的主要城市共开设25个办公室，拥有近三百名合伙人和近两千名专业律师，并仍在迅速扩张中。凭借180年的法律服务经验和丰富的行业知识，斐石国际律师事务所为众多国际知名企业提供了大量优质服务。正因为如此，斐石国际律师事务所的近百位专业律师在钱伯斯（Chambers）和Legal 500中的几十个专业领域榜上有名并名列前茅。2017年斐石英国办公室被评为LegalWeek全英最佳律所、2015-2018荣获北京市优秀律师、2017-2018，2018-2019连续两个年度Fieldfisher斐石律师事务所荣膺《商法》“竞争法与反垄断” 业务领域（国际所）卓越律所大奖、在Corporate Intl 杂志主办的“2018年全球法律大奖（Corporate INTL Global Awards）”中，凭借在反垄断领域的行业影响力、服务创新力及领先性方面的突出表现，荣膺“中国年度最佳反垄断律师事务所(Competition Law Firm of the Year in China)”奖项、2018年4月19日在英国伦敦的Grosvenor House 举办的 the prestigious Legal Business Awards颁奖典礼上，荣获英国年度最佳律所大奖，以及在2019年全英的知识产权管理奖的颁奖典礼上斐石英国办公室被评为 “ Trade Mark Prosecution Firm of the Year - UK 2019 " 。
斐石律师事务所
长按扫码关注我们

斐石口号：专业化品牌化国际化