NHS: Computer Software

Department of Health and Social Care written question – answered on 21st May 2020.

Alert me about debates like this

Photo of Gill Furniss Gill Furniss Shadow Minister (Equalities Office) (Women and Equalities)

To ask the Secretary of State for Health and Social Care, with reference to the NHS covid-19 contact tracing app, what consultation the Government has had with the Information Commissioner before processing personal data under Article 36 of The General Data Protection Regulation 2016/679.

Photo of Nadine Dorries Nadine Dorries Minister of State (Department of Health and Social Care)

There is no legal requirement for the data controller to consult the Information Commissioner’s Office (ICO) under Article 36 of the General Data Protection regulation as the data collected is not identifiable and the processing is not therefore considered to be high risk.

However, the ICO has been working with NHSX for some time providing information governance assurance on the app development, including advising on the Data Protection Impact Assessment regarding risk mitigation. The ICO is represented on the Assurance Board and on the Ethics Advisory Board as an observer. Both boards report up to the app’s Oversight Board.

The ICO published a statement on 24 April confirming they will offer support during the life of the app as it is developed, rolled out, and when it is no longer needed.

Does this answer the above question?

Yes1 person thinks so

No0 people think not

Would you like to ask a question like this yourself? Use our Freedom of Information site.