Asia Australia Brazil Canada China Cyprus Germany Hong Kong Indonesia Ireland Malaysia Mexico Morocco Saudi Arabia South Africa Switzerland United Arab Emirates United Kingdom United States Webinar

The Compliance Digest
Subscribe Us!
  • Home
  • About Us
  • Categories
    • Compliance
    • Compliance Training & Education
    • Corporate Governance
    • Data Security & Privacy
    • Ethical & Social Responsibility
    • Events & Conferences
    • Expert Interviews
    • Financial Crimes & Fraud Prevention
    • Personal & Professional Development
    • Regulatory Updates
    • Risk Management
    • Technology & Fintech
  • Media Sources
  • Contact
Data Security & Privacy

Sharing personal data in mental health emergencies

Morton Fraser MacRoberts | Alan Delaney

New guidance has been published clarifying that data protection laws do not prevent necessary and appropriate information being shared in an emergency.

When does the guidance apply?

The new guidance – Information sharing in mental health emergencies at work – which has been published by the Information Commissioner’s Office, aims to give employers greater certainty about sharing information about workers in the event of a mental health emergency. A mental health emergency is defined as “a situation in which you believe that someone is at risk of serious harm to themselves, or others, because of their mental health.”

Where there is a more general health emergency which does not meet this definition, employers should follow the ICO guidance on when workers’ health information can be shared.

What are the key takeaways from the guidance?

The general message is that during a mental health emergency employers should share necessary and proportionate information without delay with relevant and appropriate emergency services and health professionals. Employers should focus on sharing the information with the right people to protect the employee involved and/or others from serious harm.

The guidance also recommends planning ahead where possible. From a practical perspective that should include:

  • Putting in place a policy covering sharing of personal information in a mental health emergency;
  • Making workers aware of the policy and that their health information may be shared in these circumstances;
  • Training staff on the appropriate response – this could be part of wider training on mental health or for first aiders;
  • Ensuring details of workers next of kin are up-to-date.

From a legal perspective, it means identifying a lawful basis for sharing information, which includes identifying a special category condition, as health information falls under special category data. The guidance covers the most likely lawful bases and special category conditions that may apply.

The guidance also highlights that employers may also need to share information with a worker’s emergency contact person. Discretion will need to be used as to what information needs to be shared. While the emergency services may need full details, the emergency contact person may only need to know that the employer has serious concerns regarding the worker’s wellbeing along with the details of the emergency services that have been contacted.

This article first appeared on Lexology. You can find the original version here.

About Author / ayianni

Previous post
Assessing the FCA data study’s response to user concerns
Next post
Regulating AI – UK & EU take divergent approaches

Leave a Comment Cancel reply

Your email address will not be published.

You Might Also Like

Data Security & Privacy

Navigating Legal Requirements for Data: Staying Compliant in a Rapidly Changing Data World

28 July 2025
Data Security & Privacy

The intersection of data privacy regulations and GRC

7 February 2024
Data Security & Privacy

Navigating the Cybersecurity Landscape: Safeguarding Your Digital Life at Work and Home

3 June 2023
compliance

Compliance

compliance-training-education

Compliance Training & Education

corporate-governance

Corporate Governance

data-security-privacy

Data Security & Privacy

ethical-social-responsibility

Ethical & Social Responsibility

events-conferences

Events & Conferences

expert-interviews

Expert Interviews

financial-crimes-fraud-prevention

Financial Crimes & Fraud Prevention

personal-and-professional-development

Personal & Professional Development

regulatory-updates

Regulatory Updates

risk-management

Risk Management

technology-fintech

Technology & Fintech

true

Subscribe to get the latest GRC news!

The Compliance Digest
Copyright © 2023 - The Compliance Digest
Privacy Policy Terms of Service
Subscribe Us!
  • Home
  • About Us
  • Categories
    • Compliance
    • Compliance Training & Education
    • Corporate Governance
    • Data Security & Privacy
    • Ethical & Social Responsibility
    • Events & Conferences
    • Expert Interviews
    • Financial Crimes & Fraud Prevention
    • Personal & Professional Development
    • Regulatory Updates
    • Risk Management
    • Technology & Fintech
  • Media Sources
  • Contact

Start typing and press Enter to search