Guidelines on obtaining information on workers’ health published

The fourth and final part of the Employment Practices Data Protection Code – Information about Workers’ Health is intended to help employers comply with the Data Protection Act 1998 (DPA) and encourage them to adopt good practice.

This part of the code addresses the collection and subsequent use of information about a worker’s physical or mental health or condition.

It aims to strike a balance between the legitimate expectations of workers that personal information about them will be handled properly and the legitimate interests of employers in deciding how best, within the law, to run their own businesses. It does not impose additional legal obligations.

The code covers sickness and injury records, occupational health schemes, information from medical examination and testing, drug and alcohol testing and genetic testing.

In general employers should only collect health information where it is necessary for health and safety reasons, to prevent discrimination, to satisfy other legal obligations or if each worker has given his or her explicit consent. If consent is to be relied upon, it must be given freely, the ICO advised.

David Smith, assistant information commissioner, said: “Information about people’s health is very sensitive and requires effective protection. This part of the code addresses issues of real, practical relevance to many employers and those they employ.

All four parts of the Employment Practices Data Protection Code will be published together in one volume in 2005.