Reporting, recording, and communication of COVID-19 cases in workplace: data protection as a moving target