This privacy notice explains:
- how personal information is going to be used
- what it is used for
- who it might be shared with and why
- how long it is kept.
The information you provide helps us deliver our services effectively.
West Sussex County Council is working with Public Health England to deliver the local tracing partnership.
For further information on how they are handling your information for Test and Trace, view Public Health England's privacy notice.
Personal and special category data
The categories of personal data we are processing are:
- Unique record ID
- Full name and contact details
- Date of birth
- NHS number
- Accommodation type, home postcode and house number
- COVID-19 symptoms, including when they started and their nature
- Clinically extremely vulnerable status and any support required
- Names and contact details for members of your family, your household, and people you have been in contact with as necessary
- Places you have visited/leisure activities.
Personal information will come from different sources, such as:
- Public Health England
- individuals contacted by the local tracing partnership
- internally held datasets in order to improve the quality of contact training.
West Sussex County Council (WSCC) complies with the Data Protection Act and the General Data Protection Regulation (GDPR). It is registered as a ‘Data Controller’ with the Information Commissioner’s Office (Reg. No. Z6413427).
We ensure that your personal data is accurate, processed fairly and lawfully, kept secure and retained for no longer than is necessary.
Access to the information is restricted to those parties where it is necessary to carry out their function and where it is appropriate, personal information will be shared with third party organisations responsible for providing support services as part of the response to the coronavirus pandemic.
All sharing will be carried out securely. Staff will complete the necessary training including their responsibilities for protecting confidentiality and sharing where it is appropriate.
The legal basis for processing personal data
To trace the contacts of people with COVID-19 through our local tracing partnership, West Sussex County Council needs to collect personally identifiable information.
To ensure that you have confidence in providing your personal information over the telephone, all call handlers will be calling on behalf of West Sussex County Council and will state this at the start of each call.
The law on protecting personally identifiable information, known as the General Data Protection Regulation (GDPR), allows West Sussex County Council to use the personal information collected for the purpose of Test and Trace (COVID-19).
The section of the GDPR that applies is:
- Article 6(1)(e) ‘processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller’.
The legal basis for processing special category data
As information about health is a special category of personal information, a further section of the GDPR applies:
- Article 9(2)(i) ‘processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of healthcare’.
How we use your personal information
West Sussex County Council is working with Public Health England to provide the local contact tracing service in response to the coronavirus pandemic. Cases will be referred by Public Health England to the West Sussex Local Tracing Partnership.
- contact tracers to call people who have tested positive with COVID-19 to offer advice and gather information about the people they may have come into close contact with and who may be at increased risk of being infected with the coronavirus
- the necessary sharing of personal information to third party organisations using minimum data.
Your information may also be used for different purposes that are not directly related to your health and care. These include:
- research into COVID-19
- planning of services or actions in response to COVID-19
- monitoring the progress and development of COVID-19.
Whenever possible, information that does not directly identify you will be used for these purposes, but there may be times when it is necessary for your personal information to be used. Any releases of information that identify you will be lawful and the minimum necessary for that purpose.
Who we share your information with
We may pass data to:
- Other Local Authorities at District and Borough level to enable WSCC staff operating as part of the Local Tracing Partnership to check contact information for the positive case in order to contact them.
How long we keep your personal data
The personal information will only be held as long as directed by the Department of Health and Social Care (DoHSC).
For more information, visit GOV.UK's notification to organisations to share information .