Privacy Notice - Public Health England Covid-19 Test Data

For the processing to which this notice relates the council is provided with pseudonimised data which means that it does not identify an individual but may do so if matched with other data.

The information the council receives from Public Health England is details of positive test results for Covid 19. The details provided are fields such as postcode, gender, age, ethnicity and occupation.

Information is provided to the council from Public Health England.

Details of positive test results received from Public Health England may be matched with other data we receive from local hospitals, NHS Trusts, national agencies (such as NHS England or MHCLG) and local Registrars. This is used to help the council understand the spread of Covid 19 and to provide additional services and assistance where required. It may also be used for research purposes and to plan future emergency responses.

The legal basis on which we are using the information is:

(1)(c) to do so is necessary because of a legal obligation that applies to the Council

(1)(e) to do so is necessary for the performance of a task carried out in the public interest, or in the exercise of official authority

(2)(g) processing is necessary for reasons of substantial public interest.

(2)(i) processing is necessary for reasons of public interest in the area of public health

We sometimes need to share your information within the Council or with other organisations. We will only share your information when necessary and when the law allows us to, and we will only share the minimum information we need to.

In certain cases we may also share your information with other individuals and organisations. For example, if you make a complaint to your Councillor, or if the sharing would help with a safeguarding issue, or help prevent a crime. Sometimes, we might share your information without your knowledge.

The Council will never sell your information to anyone else.

Information will be held for 10 years and will then be reviewed. If the data is still relevant to local and national research it will be retained and reviewed every 10 years. When no longer required it will be deleted.

The law gives you specific rights over your information. These rights are:

• to be informed of our use of information about you;
• of access to information about you;
• rectify information about you that is inaccurate;
• to have your information erased (the ‘right to be forgotten’);
• to restrict how we use information about you;
• to move your information to a new service provider;
• to object to how we use information about you;
• not to have decisions made about you on the basis of automated decision making;
• to object to direct marketing; and,
• to complain about anything the Council does with your information (please see the ‘Complaints’ section below).

Some of the rights listed above apply only in certain situations, and some have a limited effect. Your rights are explained further in the Individuals’ Rights Procedure on our website, as is how to make a request under one or more of them.

You can request information about yourself by making a subject access request on this page of the Council’s website.

This notice is kept under regular review to make sure it is up to date and accurate.

The Council is required by law to have a DPO. The DPO has a number of duties, including:

• monitoring the Council’s compliance with data protection law;
• providing expert advice and guidance on data protection;
• acting as the point of contact for data subjects; and,
• co-operating and consulting with the Information Commissioner’s Office (see ‘Complaints’ below).

The Council’s Data Protection Officer can be contacted by email at information.governance@doncaster.gov.uk 

If you are unhappy with the way in which your information has been handled you should contact the Council’s Data Protection Officer so that we can try and put things right.

Alternatively, and if we have been unable to resolve your complaint, you can also refer the matter to the Information Commissioner’s Office (ICO). The ICO is the UK's independent body set up to uphold information rights, and they can investigate and adjudicate on any data protection related concerns you raise with them. They can be contacted via the methods below:

Website: www.ico.org.uk  

Telephone: 0303 123 1113

Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF