Guidance

NHS COVID-19 app: privacy information

Privacy notice and data protection impact assessment for the NHS COVID-19 mobile app.

From:
Department of Health and Social Care
Published:
13 August 2020
Last updated:
1623 March 2021, see all updates
Applies to:
Wales and England

Documents

NHS COVID-19 app: privacy notice

HTML

NHS COVID-19 app: privacy notice for young people

HTML

NHS COVID-19 app: privacy information (Easy Read)

PDF, 690KB, 17 pages

This file may not be suitable for users of assistive technology.

Request an accessible format.
If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email publications@dhsc.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

NHS COVID-19 app privacy notice (Easy Read)

HTML

Ap COVID-19 y GIG: hysbysiad preifatrwydd (Welsh language privacy notice)

HTML

Ap COVID-19 y GIG: Hysbysiad Preifatrwydd i Bobl Ifanc (privacy notice for young people, Welsh language)

HTML

Ap COVID-19 y GIG: Hysbysiad preifatrwydd (Welsh language Easy Read)

PDF, 285KB, 19 pages

NHS COVID-19 app: data protection impact assessment

HTML

DPIA annex 1: onboarding user journey flow

PDF, 2.81MB, 1 page

This file may not be suitable for users of assistive technology.

Request an accessible format.
If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email publications@dhsc.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

DPIA annex 2: high-risk postcode district user journey flow

PDF, 598KB, 1 page

This file may not be suitable for users of assistive technology.

Request an accessible format.
If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email publications@dhsc.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

DPIA annex 3: symptom checker user journey flow

PDF, 951KB, 1 page

This file may not be suitable for users of assistive technology.

Request an accessible format.
If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email publications@dhsc.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

DPIA annex 4: isolation countdown user journey flow

PDF, 3.73MB, 1 page

This file may not be suitable for users of assistive technology.

Request an accessible format.
If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email publications@dhsc.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

DPIA annex 5: pause and resume user journey flow

PDF, 1.4MB, 1 page

This file may not be suitable for users of assistive technology.

Request an accessible format.
If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email publications@dhsc.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

DPIA annex 6: more information user journey flow

PDF, 2.13MB, 1 page

This file may not be suitable for users of assistive technology.

Request an accessible format.
If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email publications@dhsc.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

NHS COVID-19 app: anonymisation, definitions and user data journeys

HTML

NHS COVID-19 app: our processing of special categories of personal data

HTML

Details

This privacy notice sets out privacy information for the NHS COVID-19 app. It covers:

  • the personal data the app collects and how we use it
  • measures taken to ensure the use of the app respects your privacy, is secure and in line with data protection law

The data protection impact assessment formally documents how the app works and how it protects the privacy of its users.

Published 13 August 2020
Last updated 1623 March 2021 + show all updates

  1. Privacy notice updated, including Welsh language version.

  2. Updated 'Ap COVID-19 y GIG: hysbysiad preifatrwydd' (Welsh language privacy notice), adding link to frequently asked questions under 'right of access and requests for information'.

  3. Added link to frequently asked questions under 'Right of access and requests for information'.

  4. Updated data protection impact assessment to reflect recent changes to the app and digital contact tracing functionality (provided by Apple and Google). Includes updates on virology testing, design objectives, coronavirus testing at scale, self-isolation countdown (isolate) and data dictionary.

  5. Updated with links to guidance for England and Wales.

  6. Updated the privacy notice to reflect changes to the app to align with testing policy for the user’s country (England or Wales), based on their local authority, which includes confirmatory testing. Added more detail about the service monitoring of the app’s functionality (in the section ‘Function: all features’).

  7. Updated 'Ap COVID-19 y GIG: Hysbysiad Preifatrwydd i Bobl Ifanc (privacy notice for young people, Welsh language)' to reflect recent changes to the app and digital contact tracing functionality (provided by Apple and Google). Includes updates on the use of local authority and postcode district, the updated digital contact tracing and analytical data set and option to support for applications for self-isolation payment.

  8. Updated 'Ap COVID-19 y GIG (Welsh language privacy notice)' to reflect recent changes to the app and digital contact tracing functionality (provided by Apple and Google). Includes updates on the use of local authority and postcode district, the updated digital contact tracing and analytical data set and option to support for applications for self-isolation payment.

  9. Updated data protection impact assessment to reflect recent changes to the app and digital contact tracing functionality (provided by Apple and Google). Includes updates on the use of local authority and postcode district, the updated digital contact tracing and analytical data set and option to support for applications for self-isolation payment.

  10. Updated 'NHS COVID-19 app: privacy notice', 'NHS COVID-19 app: privacy notice for young people' and 'NHS COVID-19 app: privacy information (Easy Read)' to reflect recent changes to the app and digital contact tracing functionality (provided by Apple and Google). Includes updates on the use of local authority and postcode district, the updated digital contact tracing and analytical data set and option to support for applications for self-isolation payment.

  11. Updated privacy notices to detail the recent changes to the app and digital contact tracing functionality (provided by Apple and Google). Includes updates on the use of local authority and postcode district, the updated digital contact tracing and analytical data set.

  12. Updated 'privacy notice for young people, Welsh language' to reflect the changes in the app and work to support digital contact tracing apps across England, Gibraltar, Jersey, Northern Ireland, Scotland and Wales.

  13. Updated Welsh language privacy notice and easy read to reflect the changes in the app and work to support digital contact tracing apps across England, Gibraltar, Jersey, Northern Ireland, Scotland and Wales.

  14. Updated privacy notices and information, and data protection impact assessment to reflect the changes in the app and work to support digital contact tracing apps across England, Gibraltar, Jersey, Northern Ireland, Scotland and Wales.

  15. Added Welsh language versions of privacy notice for young people and the Easy Read: 'Ap COVID-19 y GIG: Hysbysiad Preifatrwydd i Bobl Ifanc' and 'Ap COVID-19 y GIG: Hysbysiad preifatrwydd'.

  16. Added Welsh language version of the privacy notice: 'Ap COVID-19 y GIG '

  17. Added new and updated privacy notices for national launch of the app, including an updated data protection impact assessment.

  18. First published.