Contact tracing: Data Protection

Department of Health and Social Care written question – answered on 7th September 2020.

Alert me about debates like this

Photo of Caroline Lucas Caroline Lucas Green, Brighton, Pavilion

To ask the Secretary of State for Health and Social Care, pursuant to his oral contribution of 20 July 2020, Official Report 1865 and with reference to comments by his Department's spokesperson of 20 July 2020 that an overarching data protection impact assessment on the NHS test and trace service was in development, when that overarching impact assessment will published; for what reason he did not refer to that assessment in his oral Answer to the hon. Member for Brighton, Pavilion; and if he will make a statement.

Photo of Caroline Lucas Caroline Lucas Green, Brighton, Pavilion

To ask the Secretary of State for Health and Social Care, pursuant to his oral contribution of 20 July 2020, Official Report, column 1865, on Coronavirus Response, what was the scope of each of the three data protection impact assessments; and when he plans to publish those assessments.

Photo of Helen Whately Helen Whately Minister of State (Department of Health and Social Care)

The NHS Test and Trace programme is progressing at a fast pace of development to rise to the challenges posed by the pandemic. We are continuing to work on the overarching Data Protection Impact Assessment (DPIA). This is a live document which continues to evolve as the programme develops, as such we are meeting our obligations under the General Data Protection Regulation as implemented by the Data Protection Act 2018.

The three data protection impact assessments referred to are:

- The DPIA for the NHS COVID-19 App, of which a second iteration has now been published to coincide with the launch of the pilot phase of the new app. This can be found at the following link:

https://www.gov.uk/government/publications/nhs-test-and-trace-app-privacy-information/the-nhs-test-and-trace-app-early-adopter-trial-august-2020-data-protection-impact-assessment#the-nhs-test-and-trace-app-data-protection-impact-assessment

- The DPIA for Public Health England Contact Tracing, and;

- The DPIA for National Antigen Testing.

As internal information risk assessments documents, DPIAs are not routinely published.

Does this answer the above question?

Yes1 person thinks so

No0 people think not

Would you like to ask a question like this yourself? Use our Freedom of Information site.