As the coronavirus pandemic has spread throughout Europe, data protection authorities (DPAs) have faced questions about how far employers and other organizations—including schools, apartment blocks, and shopping centers—can go in terms of asking people personal and medical-related information to protect the rest of the public at large.

And despite the fact the European Union has one single, overarching piece of stringent data privacy legislation—the General Data Protection Regulation (GDPR)—several of the 28 EU member states have taken views that are not wholly consistent with the rest of the pack.

Neil Hodge is a freelance business journalist and photographer based in Nottingham, United Kingdom. He writes on insurance and risk management, corporate governance, internal audit, compliance, and legal...