Episode 2 speaker Meribeth Banaschik co-authored a piece with an EY colleague in September 2021 entitled “How COVID-19 continues to affect data privacy in employment”.  The piece states, among other things:

“According to Article 9 of the General Data Protection Regulation (GDPR), processing personal health data has a wide definition and is generally prohibited, but the article provides exceptions in relation to processing.  While employee consent is required to collect and process sensitive personal data to the extent the data is essential to meet the purposes of the employment relationship, employers can lawfully request disclosure and processing of employees’ health data by virtue of the existing employment relationship, or for reasons of public interest.”


It also discusses, for instance, vaccinations and other employee issues.


Read the full piece here.