This article was written by Ian Bond.
The ICO previously emphasised that data protection legislation should not prevent organisations appropriately responding the COVID-19 public health emergency. This recent guidance helps to provide some more detail on what this means from a regulatory perspective.
Highlights from the document include:
The regulator’s paper concludes that it expects to have to demonstrate continued flexibility in some areas for many months to come due to the significant effects of the crisis; unfortunately this is a message that is likely to be a theme across a regulatory landscape that extends far beyond the remit of the ICO.