Due to the outbreak of COVID-19, organisations are taking
various preventive measures to prevent the spread of the virus.
These range from questionnaires (about recent destinations, medical
symptoms, etc.) to measuring body temperature (with a thermometer
or even with thermal imaging cameras) and taking immunity tests. As
part of these measures, in most cases employees' and
visitors' personal data will be processed. How far can an
organisation go in processing this data?
Processing of sensitive data
As such, medical tests do not constitute processing of personal
data. However, as soon as information is collected, stored,
transmitted or consulted, personal data is processed, which implies
the need for compliance with data protection legislation including
the GDPR.
