1. Why is this data being collected?
The NHS Test and Trace app Survey is a new research study commissioned by the Department for Health and Social Care. The study will help to evaluate the success of the roll-out of a new smartphone app designed to track and trace symptoms of Coronavirus (COVID-19) – the NHS Test and Trace App.
The Department for Health & Social Care has commissioned The National Centre for Social Research (NatCen) to carry out the study on their behalf. NatCen is Britain’s largest independent social research agency. For over 50 years it has worked with charities and government to find out what people really think about the big issues. NatCen is independent of all government departments and political parties.
Your personal data will only be used for research and statistical purposes. This means you will never receive any sales or marketing calls as a result of taking part in the survey.
2. What is the lawful basis for processing this data?
The legal basis for processing the data is:
Art.6(1(e) – ‘processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller’
Art 9 (i) processing is necessary for reasons of public interest in the area of public health.
Taking part in the survey is entirely voluntary.
3. Who is the data controller?
The Department for Health and Social Care (DHSC) is the data controller. NatCen Social Research is the data processor, working under contract for DHSC.
More information on the Department for Health and Social Care’s personal information charter, incorporating its privacy notice, can be found at https://www.gov.uk/government/organisations/department-of-health-and-social-care/about/personal-information-charter
You can contact the Data Protection Officer at the Department for Health and Social Care by email at: email@example.com
You can contact the Data Protection Office at the National Centre for Social Research by email at: firstname.lastname@example.org
4. What will happen to my data?
Taking part is completely voluntary and you can skip any questions you do not wish to answer. All data will be anonymised.
Your name and contact details will be kept separate from your answers. NatCen will use your personal data and responses solely for this research. No identifiable data will be shared outside NatCen (unless you agree to provide your information to take part in further research), and it will not be possible to identify you in any published results.
NatCen will only retain your data in a way that can identify you for as long as is necessary to support the research project and findings. In practice, this means that once we have satisfactorily obtained the research data, we will securely remove your personal, identifying data from our systems. For this project we will securely remove your personal data from our systems by December 2020.
You have the right to request access to your data, to amend it if it is incorrect, or to ask for it to be deleted. The anonymised datasets will be kept indefinitely, as the survey data will continue to be useful to researchers and policy makers.
For more information about your data, you can contact the NatCen Data Protection Officer by email: email@example.com and can read our data protection policy at natcen.ac.uk/help/privacy.
5. What purposes will your data be used for?
The data will be used to evaluate the performance of the NHS Test and Trace App.
6. Will data be shared with any third parties?
We may ask for your permission to share your information with people we work with, including government organisations and other public bodies. We would only share your information with your consent and it would only be used for research purposes. You are able to withdraw your consent at any time.
7. Do I have to take part?
Taking part in this survey is not a statutory or contractual requirement, and participation is therefore completely voluntary.
There will be no consequences if you decide not to take part.
8. Where will my personal data be stored?
All personal data are stored securely, in line with international best practice and NatCen’s ISO27001, ISO 20252 and Cyber Essentials Plus certifications. Data will be stored on NatCen’s servers which are based in the UK.
9. Will any part of the processing be sub-contracted to a third party organisation?
On occasions, some elements of the processing, such as printing and postage will be sub-contracted. All sub-contractors working for NatCen come from our ‘Approved Supplier List’. These are suppliers that are already vetted by us with signed contracts and agreement already in place and refreshed every 12 months.
10. Will my survey answers be linked to any other information?
Your answers to this survey will not be linked to any other information.
11. What are my rights and will I have access to my data?
Under the Data Protection legislation, you have the following rights with regards to your personal information:
- the right to be informed about the collection and the use of your personal data
- the right to access your personal data and supplementary information
- the right to have inaccurate personal data rectified, or completed if it is incomplete
- the right to erasure (to be forgotten) in certain circumstances
- the right to restrict processing in certain circumstances
- the right to data portability, which allows the data subject to obtain and reuse your personal data for your own purposes across different services
- the right to object to processing in certain circumstances
- rights in relation to automated decision making and profiling
- the right to withdraw consent at any time
- the right to complain to the Information Commissioner
In regard to this survey, please note that once data is aggregated and anonymised, we would not be able to change the results by removing individual information. However, you can request that your personal data be deleted or updated and we will let you know if this is possible or not.
You have the right to access your personal data within the period that NatCen holds it. Providing responses to this survey is entirely voluntary. You have the right to withdraw your consent to our processing of your personal data at any time, although once data is analysed it is not possible to withdraw your data from the outputs.
You also have the right to rectify any incorrect or out-of-date personal data about you which we may hold. If you want to exercise your rights, please contact us at firstname.lastname@example.org.
We must generally respond to requests in relation to your rights within one month, although there are some exceptions to this.
If you believe we have not complied with your data protection rights you can contact us at email@example.com. You also have the right to lodge a complaint with the Information Commissioner’s Office at:
Information Commissioner's Office
Telephone - 0303 123 1113