January 15 2021

Information Collected

  • Name
  • Address 
  • Date of Birth
  • Age
  • Contact telephone numbers
  • Email address
  • Job Title (if applicable)
  • Description of role (if applicable)
  • Workplace name & address (if applicable) 
  • Health Information  
    • Symptoms
    • Tests (if applicable)
    • Hospital admissions (if applicable)
    • Infectious period
  • Household contacts
  • Non-household contacts
    • Direct contact
    • Proximity contact
    • International travellers
    • International travellers (exempted countries)
  • National Insurance number

Agencies we might share the information with

  • Betsi Cadwaladr University Health Board
  • Public Health Wales
  • Welsh Government
  • Third Sector Organisations (such as General Practitioners)
  • Other local authorities
  • NHS Digital
  • NHS England / NHS Improvement
  • UK Biobank
  • Data Cymru

Purpose for processing

  • Understanding Covid-19 and risks to public health, trends in Covid-19 and such risks, and controlling and preventing the spread of Covid-19 and such risks; 
  • Identifying and understanding information about patients or potential patients with or at risk of Covid-19, information about incidents of patient exposure to Covid-19 and the management of patients with or at risk of Covid-19 including: locating, contacting, screening, flagging and monitoring such patients and collecting information about and providing services in relation to testing, diagnosis, self-isolation, fitness to work, treatment, medical and social interventions and recovery from Covid-19; 
  • Understanding information about patient access to health services and social care services and the need for wider care of patients and vulnerable groups as a direct or indirect result of Covid-19 and the availability and capacity of those services or that care; 
  • Monitoring and managing the response to Covid-19 by health and social care bodies and the Government including providing information to the public about Covid-19 and its effectiveness and information about capacity, medicines, equipment, supplies, services and the workforce within the health services and social care services; 
  • Delivering services to patients, clinicians, the health services and social care services workforce and the public about and in connection with Covid-19, including the provision of information, fit notes and the provision of health care and social care services; 
  • Payments in connection with Covid-19; and 
  • Research and planning in relation to Covid-19.

Legal basis

Personal Data

  • GDPR Article 6(d) to protect your vital interests
  • GDPR Article 6(e) to perform a public task

Special category data

  • GDPR Article 9(2)(g) substantial public interest
  • GDPR Article 9(2)(h) the provision of health or social care treatment or the management of health or social care systems or services
  • GDPR Article 9 (2)(i) protection of public health
  • GDPR Article 9 (2)(j) analysis of information for statistical purposes

External links