Read on Twitterhttps://contact-tracing.phe.gov.uk/help/privacy-notice">https://contact-tracing.phe.gov.uk/help/priv...
“the NHS Test and Trace needs to collect personal identifiable information.”
The information collected on people with coronavirus or those with symptoms includes their:
full name
date of birth
home postcode and house number
telephone number
email address
The information collected on people with coronavirus or those with symptoms includes their:
full name
date of birth
home postcode and house number
telephone number
email address
The information collected on the contacts of people with coronavirus includes, where available, their:
full name
home postcode and house number
telephone number
email address
full name
home postcode and house number
telephone number
email address
“The personal identifiable information collected by the NHS Test and Trace is protected in several ways.” <PII again! 
https://abs.twimg.com/emoji/v2/... draggable="false" alt="🤦♂️" title="Man facepalming" aria-label="Emoji: Man facepalming">
“The personal identifiable information collected by the NHS Test and Trace on people with coronavirus or who have symptoms will be kept for 20 years.” < PII again https://abs.twimg.com/emoji/v2/... draggable="false" alt="🤦♂️" title="Man facepalming" aria-label="Emoji: Man facepalming"> But oh my kept for TWENTY YEARS!! Show the legal basis for that please
“The personal identifiable information collected on the contacts of people with coronavirus, including those who are showing symptoms, will be kept for 5 years.” <PII again! https://abs.twimg.com/emoji/v2/... draggable="false" alt="🤦♂️" title="Man facepalming" aria-label="Emoji: Man facepalming"> But why is this data kept for FIVE years? What’s the legal basis? Where’s the assessment
You have to contact the FOI office to exercise your data protection rights ? https://abs.twimg.com/emoji/v2/... draggable="false" alt="🤷🏼♂️" title="Man shrugging (medium light skin tone)" aria-label="Emoji: Man shrugging (medium light skin tone)"> @PHE_uk
@PHE_uk" title="You have to contact the FOI office to exercise your data protection rights ? https://abs.twimg.com/emoji/v2/... draggable="false" alt="🤷🏼♂️" title="Man shrugging (medium light skin tone)" aria-label="Emoji: Man shrugging (medium light skin tone)"> @PHE_uk" class="img-responsive" style="max-width:100%;"/>
Dear @phe_uk https://abs.twimg.com/emoji/v2/... draggable="false" alt="🤦♂️" title="Man facepalming" aria-label="Emoji: Man facepalming"> “The law on protecting personal identifiable information, known as the General Data Protection Regulation (GDPR), allows PHE to use the personal identifiable information collected by the NHS Test and Trace.”https://abs.twimg.com/emoji/v2/... draggable="false" alt="🤦♂️" title="Man facepalming" aria-label="Emoji: Man facepalming"> PII
There is a data protection officer who can be contacted with concerns .. but rights are exercised via the FOI team.
And the privacy notice for Test and Trace was ‘First published: 04 March 2020’ Really? 4 March ...
... by the NHS Test and Trace to protect the public from coronavirus.”
Not explained but assumed it is Section 251 of the Health Services Act.
Not explained but assumed it is Section 251 of the Health Services Act.
The Privacy Notice is not the same as the NHS Covid App
I’ve emailed some enquires to the data protection office and copied the feedback team as per the privacy notice. The feedback email address is ‘closed and no longer monitored’. Oh dear.
I await a response - hopefully - from the data protection office
I await a response - hopefully - from the data protection office
In my email to the @PHE_uk I have asked (among other things) for clarification of the retention periods of 5 years & 20 years, what data precisely will be used wrt to Section 251 for the broad purpose of public interest (& what interest) + details of assessment inc for 9(2)(i)
Hmm I received two auto replies to my email to the & #39;Feedback& #39; email address - this https://twitter.com/PrivacyMatters/status/1265948452606955520?s=20
and">https://twitter.com/PrivacyMa... this - the mail box is for CTAS queries only e.g. contact tracer queries. CTAS is provided by https://portal.e-lfh.org.uk"> https://portal.e-lfh.org.uk
Goodness me. A bit of a mess.
and">https://twitter.com/PrivacyMa... this - the mail box is for CTAS queries only e.g. contact tracer queries. CTAS is provided by https://portal.e-lfh.org.uk"> https://portal.e-lfh.org.uk
Goodness me. A bit of a mess.
