We use cookies to collect and analyse information on site performance and usage to improve and customise your experience, where applicable. View our Cookies Policy. Click Accept and continue to use our website or Manage to review and update your preferences.


Strictly necessary cookies

Cookie name Duration Cookie purpose
ASP.NET_SessionId Session This cookie holds the current session id (OPPassessment only)
.ASPXANONYMOUS 2 Months Authentication to the site
LSI 1 Year To remember cookie preference for Law Society websites (www.lawsociety.ie, www.legalvacancies.ie, www.gazette.ie)
FTGServer 1 Hour Website content ( /CSS , /JS, /img )
_ga 2 Years Google Analytics
_gat Session Google Analytics
_git 1 Day Google Analytics
AptifyCSRFCookie Session Aptify CSRF Cookie
CSRFDefenseInDepthToken Session Aptify defence cookie
EB5Cookie Session Aptify eb5 login cookie

Functional cookies

Cookie name Duration Cookie purpose
Zendesk Local Storage Online Support
platform.twitter.com Local Storage Integrated Twitter feed

Marketing cookies

Cookie name Duration Cookie purpose
fr 3 Months Facebook Advertising - Used for Facebook Marketing
_fbp 3 months Used for facebook Marketing
‘No basis’ for firms to collect vaccine data
Pic: RollingNews.ie

29 Jun 2021 / employment Print

‘No basis’ for collecting workers' vaccine data

An employment lawyer at ByrneWallace LLP has welcomed guidance from the Data Protection Commission (DPC) on whether employers can collect information on the vaccination status of their workers.

In a note on the firm’s website, Loughlin Deegan says that there has been a lack of “clear public-health advice” on the issue to date.

He says that, while employers may have hoped or expected that there would be scope for them to gather and use vaccination data to support a return to the workplace, the DPC guidance (titled: ‘Processing COVID-19 Vaccination Data in the Context of Employment’) does not support such an approach, other than in very limited circumstances.

‘Special category’ data

The lawyer notes that the vaccination status of an individual is health data, and is therefore seen as ‘special category’ data under article 9 of the General Data Protection Regulation (GDPR). This means it may be processed only on limited grounds.

The DPC says that, as a general position, the processing of vaccine data is likely to represent “unnecessary and excessive data collection for which no clear legal basis exists”.

Referring to the Government’s Work Safety Protocol, the DPC says that it is clear that there are other measures that businesses should employ to ensure a safe workplace, before considering whether knowledge of vaccination status is a necessary measure.

‘No legal basis’

Mr Deegan says the DPC guidance makes it clear that, for the time being, there is no general legal basis for employers to request the vaccination status of employees. It acknowledges, however, that it may be necessary for employers in certain specific sectors, notably healthcare, to process such data.

“If any employers believe that specific circumstances apply to them that might make it necessary for them to process their employees’ vaccine data, employers should take specific advice in respect of those circumstances,” the employment lawyer says.

He points out, however, that the DPC guidance is subject to review, based on whether the public-health advice changes.

“With the Government indicating that the ‘work-from-home’ advice is due to be lifted by September, public-health advice in relation to employee vaccination status is eagerly awaited,” Mr Deegan concludes.

Gazette Desk
Gazette.ie is the daily legal news site of the Law Society of Ireland