Here is a topic for genuine controversy ... should we relax the rules on use of personal data in the interests of fighting the pandemic, and if so, how can we ensure that we crank back up to full GDPR protection afterwards? The history books are full of 'temporary measures' that never got repealed (economists like to give Income Tax as an example here). However we would counsel firms to stay compliant with regulations like GDPR unless given a clear waiver by the Government, and even then to make sure they can treat this as a short term holiday, rather than a permanent relaxation. Better safe (with data) than sorry.