Due to the growing number of infections, employers should take measures to protect both their employees and their customers. These measures usually include the collection of data concerning health. For many employers, this leads to uncertainty as to whether such data processing is permissible under the GDPR, especially, when it is performed without the employee's consent.
During the past few days, the data protection authorities of several Member States already published guidelines on this subject; which, however, differ from one another in some aspects. The Austrian Data Protection Authority (Datenschutzbehörde – "DSB") has now published its view on the processing of data concerning health in the form of a guideline "Information of the Data Protection Authority on the Coronavirus (Covid-19)".
In order to learn more, please open the attached file.
