Guidance

NHS COVID-19 app: privacy information

Privacy notice and data protection impact assessment for the NHS COVID-19 mobile app.

Applies to England and Wales

Documents

NHS COVID-19 app: privacy information (easy read)

This file may not be suitable for users of assistive technology.

Request an accessible format.
If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email publications@phe.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

NHS COVID-19 app: data protection impact assessment

DPIA annex 1: onboarding user journey flow

This file may not be suitable for users of assistive technology.

Request an accessible format.
If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email publications@phe.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

DPIA annex 2: high-risk postcode district user journey flow

This file may not be suitable for users of assistive technology.

Request an accessible format.
If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email publications@phe.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

DPIA annex 3: symptom checker user journey flow

This file may not be suitable for users of assistive technology.

Request an accessible format.
If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email publications@phe.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

DPIA annex 4: isolation countdown user journey flow

This file may not be suitable for users of assistive technology.

Request an accessible format.
If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email publications@phe.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

DPIA annex 5: pause and resume user journey flow

This file may not be suitable for users of assistive technology.

Request an accessible format.
If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email publications@phe.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

DPIA annex 6: more information user journey flow

This file may not be suitable for users of assistive technology.

Request an accessible format.
If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email publications@phe.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

Details

This privacy notice sets out privacy information for the NHS COVID-19 app. It covers:

  • the personal data the app collects and how we use it
  • measures taken to ensure the use of the app respects your privacy, is secure and in line with data protection law

The data protection impact assessment formally documents how the app works and how it protects the privacy of its users.

Published 13 August 2020
Last updated 2827 SeptemberOctober 2021 + show all updates
    1. Added release 4.19 of ‘NHS COVID-19 app: data protection impact assessment’.

    2. The Privacy Notice has been updated to incorporate changes on the Self- declaration of medical exemption (England only) and participation in a COVID-19 clinical trial. The same update applies to the Welsh language version.

    3. Updated the Welsh easy-read version of the privacy information ('Ap COVID-19 y GIG: gwybodaeth preifatrwydd') to incorporate changes on the self-declaration of vaccination status and age.

    4. Updated the Welsh version of the privacy information for young people ('Ap COVID-19 y GIG: hysbysiad am breifatrwydd i bobl ifanc') to incorporate changes on the self-declaration of vaccination status and age.

    5. Updated the Welsh version of the NHS COVID-19 app: privacy notice ('Ap COVID-19 y GIG: hysbysiad preifatrwydd') and the English version of 'NHS COVID-19 app: privacy information for young people' to incorporate changes on the self-declaration of vaccination status and age.

    6. Updated the English versions of 'NHS COVID-19 app: privacy notice' and the easy-read (PDF and HTML) to incorporate changes on the self-declaration of vaccination status and age.

    7. Added updated Welsh language version of the privacy notice.

    8. Updated Privacy Notice with more information on the advisory nature of the app, details about new functionality and updating links where app users can get more information about the app and other services.

    9. Added information to 'NHS COVID-19 app: privacy notice' about the technical data collected from users' phones when there are unresolved issues with the app, including which data is collected and the restrictions on our use of that data. Same update added to Welsh language version.

    10. Updated 'Ap COVID-19 y GIG: hysbysiad preifatrwydd' (Welsh language privacy notice), to reflect the app’s late April release. This includes improvements to the app's functionality, including the ability for app users to submit their diagnosis keys after their initial chance, and improved interoperability support.

    11. Updated the NHS COVID-19 app: data protection impact assessment attachment to include new functionality introduced to the NHS COVID-19 App.

    12. Updated 'NHS COVID-19 app: privacy notice' to reflect the app’s late April release. This includes improvements to the app's functionality, including the ability for app users to submit their diagnosis keys after their initial chance, and improved interoperability support.

    13. Privacy notice updated, including Welsh language version.

    14. Updated 'Ap COVID-19 y GIG: hysbysiad preifatrwydd' (Welsh language privacy notice), adding link to frequently asked questions under 'right of access and requests for information'.

    15. Added link to frequently asked questions under 'Right of access and requests for information'.

    16. Updated data protection impact assessment to reflect recent changes to the app and digital contact tracing functionality (provided by Apple and Google). Includes updates on virology testing, design objectives, coronavirus testing at scale, self-isolation countdown (isolate) and data dictionary.

    17. Updated with links to guidance for England and Wales.

    18. Updated the privacy notice to reflect changes to the app to align with testing policy for the user’s country (England or Wales), based on their local authority, which includes confirmatory testing. Added more detail about the service monitoring of the app’s functionality (in the section ‘Function: all features’).

    19. Updated 'Ap COVID-19 y GIG: Hysbysiad Preifatrwydd i Bobl Ifanc (privacy notice for young people, Welsh language)' to reflect recent changes to the app and digital contact tracing functionality (provided by Apple and Google). Includes updates on the use of local authority and postcode district, the updated digital contact tracing and analytical data set and option to support for applications for self-isolation payment.

    20. Updated 'Ap COVID-19 y GIG (Welsh language privacy notice)' to reflect recent changes to the app and digital contact tracing functionality (provided by Apple and Google). Includes updates on the use of local authority and postcode district, the updated digital contact tracing and analytical data set and option to support for applications for self-isolation payment.

    21. Updated data protection impact assessment to reflect recent changes to the app and digital contact tracing functionality (provided by Apple and Google). Includes updates on the use of local authority and postcode district, the updated digital contact tracing and analytical data set and option to support for applications for self-isolation payment.

    22. Updated 'NHS COVID-19 app: privacy notice', 'NHS COVID-19 app: privacy notice for young people' and 'NHS COVID-19 app: privacy information (Easy Read)' to reflect recent changes to the app and digital contact tracing functionality (provided by Apple and Google). Includes updates on the use of local authority and postcode district, the updated digital contact tracing and analytical data set and option to support for applications for self-isolation payment.

    23. Updated privacy notices to detail the recent changes to the app and digital contact tracing functionality (provided by Apple and Google). Includes updates on the use of local authority and postcode district, the updated digital contact tracing and analytical data set.

    24. Updated 'privacy notice for young people, Welsh language' to reflect the changes in the app and work to support digital contact tracing apps across England, Gibraltar, Jersey, Northern Ireland, Scotland and Wales.

    25. Updated Welsh language privacy notice and easy read to reflect the changes in the app and work to support digital contact tracing apps across England, Gibraltar, Jersey, Northern Ireland, Scotland and Wales.

    26. Updated privacy notices and information, and data protection impact assessment to reflect the changes in the app and work to support digital contact tracing apps across England, Gibraltar, Jersey, Northern Ireland, Scotland and Wales.

    27. Added Welsh language versions of privacy notice for young people and the Easy Read: 'Ap COVID-19 y GIG: Hysbysiad Preifatrwydd i Bobl Ifanc' and 'Ap COVID-19 y GIG: Hysbysiad preifatrwydd'.

    28. Added Welsh language version of the privacy notice: 'Ap COVID-19 y GIG '

    29. Added new and updated privacy notices for national launch of the app, including an updated data protection impact assessment.

    30. First published.