January 15 2021
Information Collected
- Name
- Address
- Date of Birth
- Age
- Contact telephone numbers
- Email address
- Job Title (if applicable)
- Description of role (if applicable)
- Workplace name & address (if applicable)
- Health Information
- Symptoms
- Tests (if applicable)
- Hospital admissions (if applicable)
- Infectious period
- Household contacts
- Non-household contacts
- Direct contact
- Proximity contact
- International travellers
- International travellers (exempted countries)
- National Insurance number
Agencies we might share the information with
- Betsi Cadwaladr University Health Board
- Public Health Wales
- Welsh Government
- Third Sector Organisations (such as General Practitioners)
- Other local authorities
- NHS Digital
- NHS England / NHS Improvement
- UK Biobank
- Data Cymru
Purpose for processing
- Understanding Covid-19 and risks to public health, trends in Covid-19 and such risks, and controlling and preventing the spread of Covid-19 and such risks;
- Identifying and understanding information about patients or potential patients with or at risk of Covid-19, information about incidents of patient exposure to Covid-19 and the management of patients with or at risk of Covid-19 including: locating, contacting, screening, flagging and monitoring such patients and collecting information about and providing services in relation to testing, diagnosis, self-isolation, fitness to work, treatment, medical and social interventions and recovery from Covid-19;
- Understanding information about patient access to health services and social care services and the need for wider care of patients and vulnerable groups as a direct or indirect result of Covid-19 and the availability and capacity of those services or that care;
- Monitoring and managing the response to Covid-19 by health and social care bodies and the Government including providing information to the public about Covid-19 and its effectiveness and information about capacity, medicines, equipment, supplies, services and the workforce within the health services and social care services;
- Delivering services to patients, clinicians, the health services and social care services workforce and the public about and in connection with Covid-19, including the provision of information, fit notes and the provision of health care and social care services;
- Payments in connection with Covid-19; and
- Research and planning in relation to Covid-19.
Legal basis
Personal Data
- GDPR Article 6(d) to protect your vital interests
- GDPR Article 6(e) to perform a public task
Special category data
- GDPR Article 9(2)(g) substantial public interest
- GDPR Article 9(2)(h) the provision of health or social care treatment or the management of health or social care systems or services
- GDPR Article 9 (2)(i) protection of public health
- GDPR Article 9 (2)(j) analysis of information for statistical purposes