We are feeling the damaging impact of the rapid spread of the
coronavirus (COVID-19) pandemic. As a result, government, public
and private organisations are urgently taking measures to contain
and mitigate the virus, some of which have implications on the
processing of personal data.
Whilst with no hesitation it is in the interests of humanity to
curb the spread of such diseases, there is still an obligation for
data controllers and processors to protect the personal data
(including special categories of personal data) of data
subjects.
To support organisations, the European Data Protection Board
(EDPB) and the UK Information Commissioner's Office (ICO) have
both issued guidance in which the processing of personal data in a
COVID-19 context is considered. It has been stressed that whilst
emergencies may legitimise restrictions of freedoms, it is still
important that these restrictions are proportionate and limited to
the emergency period with any measures taken
