Coronavirus privacy notice

This privacy notice is to make it easier to understand and provide you with more information about how Police Forces may seek to collect and hold additional information about you in relation to the unprecedented challenges we are all facing during the Coronavirus pandemic (COVID-19).

Forces may seek to collect and process your personal data in response to the recent outbreak of Coronavirus, which is above and beyond what would ordinarily be collected from you, to ensure the safety and well-being of our officers, staff and the general public.

Such information will be limited to what is proportionate and necessary, taking into account of the latest guidance issued by the Government and health professionals, in order to manage and contain the virus.  It will enable Chief Constables to effectively fulfil their functions to keep people safe.

Where Coronavirus related information is to be used for general reporting or statistics, steps will be taken to anonymise the data and general numbers used, wherever possible.

What personal data is being collected?

 Personal data is being collected to enable Forces to identify anyone they come into contact with through their policing tasks who are in any of the high risk categories and would be considered vulnerable and/or infected with Coronavirus.

Similarly, through the Test, Track & Trace initiative, if an Officer tests positive for Coronavirus, the personal data of any persons they have encountered through their policing tasks will be collected. Those individuals may be informed separately from the NHS.

What personal data is shared with Police Forces?

Personal data collected by the Home Office may be shared with North Yorkshire Police, in order to prevent the spread. New requirements are imposed on those entering the UK from other countries to provide information, including contact details and details of their intended onward travel to ensure they self-isolate for 14 days following their arrival.

The sharing of personal data by the Home Office with the Police Forces is considered a necessary and proportionate measure to achieve the substantial public interest of preventing danger to public health. That data sharing is necessary so that police officers can conduct spot checks against a sample of addresses, or deal with breaches of the Regulations bought to their attention or in the course of their duties whether by issuing fixed penalty notices or pursuing prosecutions in accordance with the powers entrusted to the Police Forces under the Regulations.

An element of personal data is also shared from North Yorkshire Police with the Home Office, for the purpose of analysis around the issuing of Fixed Penalty Notices.

If a member of the public has contacted 101, or the police have otherwise been made aware of a concern that someone should be self-isolating the Police Forces have the option to request information from Department of Health & Social Care to establish whether a person should be self-isolating or not. The sharing of personal data by DHSC to enables Police Forces to issue fixed penalty notices and/or to enforce self-isolation.

 What is our lawful basis for processing your personal data?

The General Data Protection Regulation requires specific conditions to be met to ensure that the processing of personal data is lawful.  These relevant conditions are below:

• Article 6(1)(d) – is necessary in order to protect the vital interests of the data subject or another natural person.

Recital 46 adds that “some processing may serve both important grounds of public interest and the vital interests of the data subject as for instance when processing is necessary for humanitarian purposes, including for monitoring epidemics and their spread”.

• Article 6(1)(e) – is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Section 8(c) of the Data Protection Act sets out that such a task must be necessary for the performance of a function conferred on a person by an enactment or rule of law.  The Police Reform and Social Responsibility Act 2011 provides that Chief Constable may do anything which is calculated to facilitate or is conducive or incidental to the exercise of the functions Chief Constable. 

The processing of special categories of personal data, which includes data concerning a person’s health, are prohibited unless specific further conditions can be met. These further relevant conditions are below:

• Article 9(2)(h) – is necessary for the purposes of the provision of health or social care.
• Article 9(2)(i) – is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health.

Schedule 1, Part 2(6) – is necessary for reasons of substantial public interest and for the purpose of a function conferred on a person by an enactment or rule of law; e.g. Health Protection (Coronavirus) Regulations 2020 and Coronavirus Bill 2020

Schedule 1, Part 1(2) – is necessary for health and social care purposes.

Schedule 1, Part 1(3) – is necessary for reasons of public interest in the area of public health, and is carried out by or under the responsibility of a health professional, or by another person who in the circumstances owes a duty of confidentiality under an enactment or rule of law, e.g. Governmental guidance published by Public Health England

Am I required to provide my personal data under a statutory requirement, or am I obliged to provide it?

Whilst the provision of data cannot be mandated, you are strongly advised that it is in the best interests of all to provide this information to the Force so we are able to take relevant steps to keep you and others safe.

The information will be managed in confidential manner.  All information will be held securely and processed on a ‘need to know’ basis by only a limited number of people.  If there is a need to disclose outside of this, the minimal amount of personal data will be used.

How long will my personal data be retained by Forces?

Each Force will only keep your information for as long as it necessary, taking into account of Government advice and the on-going risk presented by Coronavirus.

Health information provided by you in relation to this outbreak of Coronavirus will not be used for any other purpose.

When the information is no longer needed for this purpose, it will be securely deleted.

Your rights

Further information about your rights can be found on our Data Protection page.

If you require further information about how we process your personal data, you can contact the Data Protection Officer via: [email protected]

Further advice and guidance from the ICO on this issue can be found:

https://ico.org.uk/global/data-protection-and-coronavirus-information-hub/ 

 

This version of the privacy notice was last updated on 27 October 2020.