18 March 2020

The State Data Protection Inspectorate of the Republic of Lithuania (“the Authority”) announced that the processing of certain personal data related to the current situation due to Covid-19 is compatible with the General Data Protection Regulation (“GDPR”).

It is stated that employers can process internal sets of personal data about employees, by including whether the person was travelling to a country of risk or in contact with a person who was traveling to country of risk. Also, employers can ask employees to get information about whether they are at home due to quarantine or whether they are sick without specifying a specific disease or other reason.

Moreover, it is said that data controller shall have the right to ask their employees whether they have symptoms of Covid-19. However, it is emphasized that the right of access to this information does not imply that employers or other data controllers can document the information received or compile relevant data files.

It is also added that any personal data processed shall be provided to public authorities for public health purposes in accordance with the GDPR requirements.

Finally, “employers should not be required to provide personal data which are not necessary to ensure the execution of the procedure established, said the Authority.

You can read the notification of the State Data Protection Inspectorate of the Republic of Lithuania here.

Should you have any queries and/or remarks, please do not hesitate to contact us.

Kind regards,

Zumbul Attorneys-at-Law