Your personal data Click to get info
Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller's possession or likely to come into their possession.
The Legal basis for processing your personal data Click to get info
During the coronavirus pandemic the Council may process your data on the basis that the data is either:
- Necessary in the vital interests of yourself or another person (Article 6(1)(d) and 9(2)(c)); or
- Necessary for the reasons of substantial public interest (Article 9(2)(g)); or
- Where it is in the interest of public health (Article 9(2)(i)).
How long we keep your personal data Click to get info
Your personal data will only be kept for as long as is necessary for the purpose for which the Council are processing it, unless there is a legitimate reason for keeping it longer. At present, it is not known how long data relating to the management of this pandemic will be retained. You can be assured that the Council will follow any published guidance in this respect as and when it becomes available.
Wherever it is possible, the Council will anonymise personal data so that you cannot be identified.
Where we do not need to continue to process your personal data, it will be securely destroyed.
Who your information will be shared with (if applicable) Click to get info
The Secretary of State for Health and Social Care, Matt Hancock, has issued four notices under Regulation 3(4) of the Health Service (Control of Patient Information) Regulations 2002 (SI 2002/1438) requiring healthcare organisations to process and share personal data for the purposes of research, protecting public health, providing healthcare services to the public and monitoring, as well as managing, the COVID-19 outbreak.
The healthcare organisations are:
- NHS Digital
- NHS England and Improvement
- Health organisations
- Arm's length bodies
- Local authorities.
The notices require that data is shared for purposes of monitoring and preventing the spread of COVID-19; they give health organisations as well as local authorities the power to share personal data for the purposes set out in the notices. In addition to data sharing, the authorisation under the notices also extends to processing data in order to notify the more vulnerable members of the public and advise them to self isolate.