Data Protection And Covid-19 Update (Health Data Processing

We have had a number of queries from schools with regards to the processing of health data for staff and pupils in light of the phased reopening of schools and the implementation of the NHS Test and Trace system. The ICO has now updated its own guidance for processing data during the “recovery” phase of the coronavirus pandemic. Below are the key points from their updated guidance as well as links to the full guidance. We have also created an addendum to your privacy notices with specific reference to the NHS Test and Trace system and a Data Protection Impact Assessment (DPIA) for health data which includes Covid-19 testing data.

Privacy Notice Update – NHS Test & Trace

We have provided an addendum to the privacy notices that covers sharing data with the NHS Test and Trace system. Whilst the information that has been released about the system doesn’t explicitly state how the system may contact employers and request information for contact tracing, our conclusion is that the most they may request is the name and contact information (phone number or email address) of anyone who has been “in contact” with one of your staff or pupils who has tested positive. The addendum reflects that and gives the legal bases for sharing that data.

You can find the addendum in Global Documents on the portal. Sign in here:

It is likely that you are also handling additional health data due to the coronavirus (including your own testing data), so you should also consider updating your existing pupil and workforce privacy notices to include this data. You should state why you are collecting it, the legal bases for that, who, if anyone, you are sharing it with, and how long you are retaining it. Let us know if you need help with this.

Updated ICO Advice

 

​Please contact us if you do have further questions at GDPR@schoolpro.uk.

Please continue to ask if there is anything further that we can do to support you at this time.

Stay safe and healthy,

Ian, Rich and Ben

SchoolPro TLC Ltd (2020)
SchoolPro TLC is not responsible for the content of external websites.