Guidance

NHS COVID-19 app: privacy information

Privacy notice and data protection impact assessment for the NHS COVID-19 mobile app.

Applies to England and Wales

Documents

NHS COVID-19 app: privacy information (easy read)

This file may not be suitable for users of assistive technology.

Request an accessible format.
If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email publications@phe.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

NHS COVID-19 app: data protection impact assessment

This file may not be suitable for users of assistive technology.

Request an accessible format.
If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email publications@phe.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

Details

This privacy notice sets out privacy information for the NHS COVID-19 app. It covers:

  • the personal data the app collects and how we use it
  • measures taken to ensure the use of the app respects your privacy, is secure and in line with data protection law

The data protection impact assessment formally documents how the app works and how it protects the privacy of its users.

Published 13 August 2020
Last updated 16 May 2022 + show all updates
  1. Added Terms of Use (Welsh).

  2. Added terms of use.

  3. Removed DPIA annexes 1 to 6.

  4. Updated Welsh app privacy notice.

  5. Replaced Welsh translation 'Ap COVID-19 y GIG: hysbysiad am breifatrwydd i bobl ifanc' with 'Ap COVID-19 y GIG: gwybodaeth am breifatrwydd i bobl ifanc'.

  6. Updated the easy read version of the App privacy notice in both English and Welsh.

  7. Updated NHS COVID-19 app: privacy notice.

  8. Updated Welsh language version of privacy notice.

  9. Updated 'NHS COVID-19 app: privacy notice'.

  10. Updated information in Your rights sections of the Privacy notice and the Privacy information for young people.

  11. Added release 4.19 of ‘NHS COVID-19 app: data protection impact assessment’.

  12. The Privacy Notice has been updated to incorporate changes on the Self- declaration of medical exemption (England only) and participation in a COVID-19 clinical trial. The same update applies to the Welsh language version.

  13. Updated the Welsh easy-read version of the privacy information ('Ap COVID-19 y GIG: gwybodaeth preifatrwydd') to incorporate changes on the self-declaration of vaccination status and age.

  14. Updated the Welsh version of the privacy information for young people ('Ap COVID-19 y GIG: hysbysiad am breifatrwydd i bobl ifanc') to incorporate changes on the self-declaration of vaccination status and age.

  15. Updated the Welsh version of the NHS COVID-19 app: privacy notice ('Ap COVID-19 y GIG: hysbysiad preifatrwydd') and the English version of 'NHS COVID-19 app: privacy information for young people' to incorporate changes on the self-declaration of vaccination status and age.

  16. Updated the English versions of 'NHS COVID-19 app: privacy notice' and the easy-read (PDF and HTML) to incorporate changes on the self-declaration of vaccination status and age.

  17. Added updated Welsh language version of the privacy notice.

  18. Updated Privacy Notice with more information on the advisory nature of the app, details about new functionality and updating links where app users can get more information about the app and other services.

  19. Added information to 'NHS COVID-19 app: privacy notice' about the technical data collected from users' phones when there are unresolved issues with the app, including which data is collected and the restrictions on our use of that data. Same update added to Welsh language version.

  20. Updated 'Ap COVID-19 y GIG: hysbysiad preifatrwydd' (Welsh language privacy notice), to reflect the app’s late April release. This includes improvements to the app's functionality, including the ability for app users to submit their diagnosis keys after their initial chance, and improved interoperability support.

  21. Updated the NHS COVID-19 app: data protection impact assessment attachment to include new functionality introduced to the NHS COVID-19 App.

  22. Updated 'NHS COVID-19 app: privacy notice' to reflect the app’s late April release. This includes improvements to the app's functionality, including the ability for app users to submit their diagnosis keys after their initial chance, and improved interoperability support.

  23. Privacy notice updated, including Welsh language version.

  24. Updated 'Ap COVID-19 y GIG: hysbysiad preifatrwydd' (Welsh language privacy notice), adding link to frequently asked questions under 'right of access and requests for information'.

  25. Added link to frequently asked questions under 'Right of access and requests for information'.

  26. Updated data protection impact assessment to reflect recent changes to the app and digital contact tracing functionality (provided by Apple and Google). Includes updates on virology testing, design objectives, coronavirus testing at scale, self-isolation countdown (isolate) and data dictionary.

  27. Updated with links to guidance for England and Wales.

  28. Updated the privacy notice to reflect changes to the app to align with testing policy for the user’s country (England or Wales), based on their local authority, which includes confirmatory testing. Added more detail about the service monitoring of the app’s functionality (in the section ‘Function: all features’).

  29. Updated 'Ap COVID-19 y GIG: Hysbysiad Preifatrwydd i Bobl Ifanc (privacy notice for young people, Welsh language)' to reflect recent changes to the app and digital contact tracing functionality (provided by Apple and Google). Includes updates on the use of local authority and postcode district, the updated digital contact tracing and analytical data set and option to support for applications for self-isolation payment.

  30. Updated 'Ap COVID-19 y GIG (Welsh language privacy notice)' to reflect recent changes to the app and digital contact tracing functionality (provided by Apple and Google). Includes updates on the use of local authority and postcode district, the updated digital contact tracing and analytical data set and option to support for applications for self-isolation payment.

  31. Updated data protection impact assessment to reflect recent changes to the app and digital contact tracing functionality (provided by Apple and Google). Includes updates on the use of local authority and postcode district, the updated digital contact tracing and analytical data set and option to support for applications for self-isolation payment.

  32. Updated 'NHS COVID-19 app: privacy notice', 'NHS COVID-19 app: privacy notice for young people' and 'NHS COVID-19 app: privacy information (Easy Read)' to reflect recent changes to the app and digital contact tracing functionality (provided by Apple and Google). Includes updates on the use of local authority and postcode district, the updated digital contact tracing and analytical data set and option to support for applications for self-isolation payment.

  33. Updated privacy notices to detail the recent changes to the app and digital contact tracing functionality (provided by Apple and Google). Includes updates on the use of local authority and postcode district, the updated digital contact tracing and analytical data set.

  34. Updated 'privacy notice for young people, Welsh language' to reflect the changes in the app and work to support digital contact tracing apps across England, Gibraltar, Jersey, Northern Ireland, Scotland and Wales.

  35. Updated Welsh language privacy notice and easy read to reflect the changes in the app and work to support digital contact tracing apps across England, Gibraltar, Jersey, Northern Ireland, Scotland and Wales.

  36. Updated privacy notices and information, and data protection impact assessment to reflect the changes in the app and work to support digital contact tracing apps across England, Gibraltar, Jersey, Northern Ireland, Scotland and Wales.

  37. Added Welsh language versions of privacy notice for young people and the Easy Read: 'Ap COVID-19 y GIG: Hysbysiad Preifatrwydd i Bobl Ifanc' and 'Ap COVID-19 y GIG: Hysbysiad preifatrwydd'.

  38. Added Welsh language version of the privacy notice: 'Ap COVID-19 y GIG '

  39. Added new and updated privacy notices for national launch of the app, including an updated data protection impact assessment.

  40. First published.