Coronavirus (COVID-19): supporting vulnerable people privacy statement
How we will store and process your details under the General Data Protection Regulation.
This file may not be fully accessible.
The support scheme for Clinically Extremely Vulnerable (shielded) individuals will come to an end on 31st March 2022. The Welsh Government will continue to hold the data for at least 6 months to assist with any residual enquiries. All information sharing arrangements with local authorities and our partners in the private sector will also come to an end on 31st March 2022.
In order to provide support to vulnerable people (including those asked to shield themselves in a letter from the Chief Medical Officer) who have been asked to self-isolate during the Covid 19 (coronavirus) pandemic, the Welsh Government and public sector partners will be processing the personal identifiable data of those people. The data will be collected from multiple sources, including directly from vulnerable people or their carers by telephone or via the internet. We will only collect the information that is necessary to support those vulnerable people in Wales.
The Welsh Government will be the data controller for the personal data it collects. We will process this data in pursuance of our public task and the official authority vested in us. Where the information amounts to special category data we will process it in the substantial public interest of protecting vulnerable people.
The data will be processed to support vulnerable people during the coronavirus epidemic through the development and management of essential support services, and enable the delivery of essential items to those most at risk, including food and medication.
We will share necessary information with third parties, such as public sector partners, including local authorities. We will also share personal information with private sector partners including food supply companies. We will only share personal data insofar as it is necessary to support vulnerable people.
Personal data provided to Welsh Government is stored on secure servers. Personal, identifiable data shared with our public sector partners and 3rd party suppliers will only be transferred using existing, accredited secure data transfer systems wherever possible. Only data absolutely necessary for the delivery of support to vulnerable persons will be shared.
Personal identifiable data held by Welsh Government will be retained for at least 6 months after the full lifting of restrictions on movement and the coronavirus epidemic, to enable the Welsh Ministers to respond to any final questions or to help with the forthcoming COVID-19 Inquiry. After this time personal data will be securely destroyed. We will continue to retain anonymous, statistical data about the list for research and evaluation purposes, but it will not be possible to identify an individual from this information.
Under GDPR, you have the following rights in relation to the personal information you provide us to enable to support you, specifically you have the right:
- To access a copy of your own data;
- For us to rectify inaccuracies in that data;
- To object to or restrict processing (in certain circumstances);
- For your data to be ‘erased’ (in certain circumstances); and
- To lodge a complaint with the Information Commissioner’s Office (ICO) who is our independent regulator for data protection.
The contact details for the Information Commissioner’s Office are: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Phone: 01625 545 745 or 0303 123 1113. Website: www.ico.gov.uk
Further information
If you have any further questions about how the data provided will be used by the Welsh Government or wish to exercise your rights using the General Data Protection Regulation, please contact the Welsh Government’s Data Protection Officer at:
Welsh Government, Cathays Park, Cardiff, CF10 3NQ,
Email: DataProtectionOfficer@gov.wales.