Guidance

NHS COVID-19 app: privacy information

Privacy notice and data protection impact assessment for the NHS COVID-19 mobile app.

From:
UK Health Security Agency
Published
13 August 2020
Last updated
28 March 2023 — See all updates

This publication was withdrawn on

The NHS COVID-19 app closed down on 27 April 2023, so this content is out of date.

The app was managed by the UK Health Security Agency, which is an executive agency sponsored by the Department of Health and Social Care. From 27 April 2023, the app is no longer available and is no longer collecting data or providing a service to app users. This document broadly reflects the service provided by the app during its later stages.

Your data and privacy now the app has closed down

The data collected by the app, which cannot identify app users, will be held in line with the retention period set out in the Privacy Notice for the NHS COVID-19 app.

Find out why the app has closed down and where to find the latest guidance.

Tynnwyd y cyhoeddiad hwn yn ôl ar 27 Ebrill 2023

Caeodd ap COVID-19 y GIG ar 27 Ebrill 2023 felly nid yw’r cynnwys hwn bellach yn gyfredol.

Rheolwyd yr ap gan Asiantaeth Diogelwch Iechyd y DU, sy’n asiantaeth weithredol a noddir gan yr Adran Iechyd a Gofal Cymdeithasol.  O 27 Ebrill 2023, nid yw yr ap ar gael bellach ac nid yw yn casglu data na yn darparu gwasanaeth i ddefnyddwyr apiau bellach. Mae’r ddogfen hon yn adlewyrchu’n fras y gwasanaeth a ddarperir gan yr ap yn ystod ei gamau diweddarach.

Eich data a’ch preifatrwydd nawr mae’r ap wedi cau

Bydd y data a gesglir gan yr ap, na all adnabod defnyddwyr yr ap, yn cael ei gadw yn unol â’r cyfnod cadw a nodir yn yr Hysbysiad Preifatrwydd ar gyfer ap COVID-19 y GIG.

Darganfyddwch pam mae’r ap wedi cau a ble i ddod o hyd i’r canllawiau diweddaraf.

Applies to England and Wales

Documents

[Withdrawn] NHS COVID-19 app: privacy notice

HTML

[Withdrawn] NHS COVID-19 app: privacy information for young people

HTML

[Withdrawn] NHS COVID-19 app: privacy information (easy read)

PDF, 1 MB, 16 pages

This file may not be suitable for users of assistive technology.

Request an accessible format.
If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email publications@ukhsa.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

[Withdrawn] NHS COVID-19 app: privacy information (easy read)

HTML

[Withdrawn] NHS COVID-19 app: data protection impact assessment

Ref: GOV-10246

PDF, 3.26 MB, 249 pages

This file may not be suitable for users of assistive technology.

Request an accessible format.
If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email publications@ukhsa.gov.uk. Please tell us what format you need. It will help us if you say what assistive technology you use.

[Withdrawn] NHS COVID-19 app: anonymisation, definitions and user data journeys

HTML

[Withdrawn] NHS COVID-19 app: our processing of special categories of personal data

HTML

[Withdrawn] NHS COVID-19 app: terms of use

HTML

Details

This privacy notice sets out privacy information for the NHS COVID-19 app. It covers:

  • the personal data the app collects and how we use it
  • measures taken to ensure the use of the app respects your privacy, is secure and in line with data protection law

The data protection impact assessment formally documents how the app works and how it protects the privacy of its users.

Updates to this page

Published 13 August 2020
Last updated 28 March 2023 + show all updates

  1. Added notice explaining that the app will be closing down on 27 April.

  2. The app terms of use have been updated to incorporate changes for V5.0 in this release, to include changes to the way you enter a test result in the app in line with current guidance.

  3. Added Terms of Use (Welsh).

  4. Added terms of use.

  5. Removed DPIA annexes 1 to 6.

  6. Updated Welsh app privacy notice.

  7. Replaced Welsh translation 'Ap COVID-19 y GIG: hysbysiad am breifatrwydd i bobl ifanc' with 'Ap COVID-19 y GIG: gwybodaeth am breifatrwydd i bobl ifanc'.

  8. Updated the easy read version of the App privacy notice in both English and Welsh.

  9. Updated NHS COVID-19 app: privacy notice.

  10. Updated Welsh language version of privacy notice.

  11. Updated 'NHS COVID-19 app: privacy notice'.

  12. Updated information in Your rights sections of the Privacy notice and the Privacy information for young people.

  13. Added release 4.19 of ‘NHS COVID-19 app: data protection impact assessment’.

  14. The Privacy Notice has been updated to incorporate changes on the Self- declaration of medical exemption (England only) and participation in a COVID-19 clinical trial. The same update applies to the Welsh language version.

  15. Updated the Welsh easy-read version of the privacy information ('Ap COVID-19 y GIG: gwybodaeth preifatrwydd') to incorporate changes on the self-declaration of vaccination status and age.

  16. Updated the Welsh version of the privacy information for young people ('Ap COVID-19 y GIG: hysbysiad am breifatrwydd i bobl ifanc') to incorporate changes on the self-declaration of vaccination status and age.

  17. Updated the Welsh version of the NHS COVID-19 app: privacy notice ('Ap COVID-19 y GIG: hysbysiad preifatrwydd') and the English version of 'NHS COVID-19 app: privacy information for young people' to incorporate changes on the self-declaration of vaccination status and age.

  18. Updated the English versions of 'NHS COVID-19 app: privacy notice' and the easy-read (PDF and HTML) to incorporate changes on the self-declaration of vaccination status and age.

  19. Added updated Welsh language version of the privacy notice.

  20. Updated Privacy Notice with more information on the advisory nature of the app, details about new functionality and updating links where app users can get more information about the app and other services.

  21. Added information to 'NHS COVID-19 app: privacy notice' about the technical data collected from users' phones when there are unresolved issues with the app, including which data is collected and the restrictions on our use of that data. Same update added to Welsh language version.

  22. Updated 'Ap COVID-19 y GIG: hysbysiad preifatrwydd' (Welsh language privacy notice), to reflect the app’s late April release. This includes improvements to the app's functionality, including the ability for app users to submit their diagnosis keys after their initial chance, and improved interoperability support.

  23. Updated the NHS COVID-19 app: data protection impact assessment attachment to include new functionality introduced to the NHS COVID-19 App.

  24. Updated 'NHS COVID-19 app: privacy notice' to reflect the app’s late April release. This includes improvements to the app's functionality, including the ability for app users to submit their diagnosis keys after their initial chance, and improved interoperability support.

  25. Privacy notice updated, including Welsh language version.

  26. Updated 'Ap COVID-19 y GIG: hysbysiad preifatrwydd' (Welsh language privacy notice), adding link to frequently asked questions under 'right of access and requests for information'.

  27. Added link to frequently asked questions under 'Right of access and requests for information'.

  28. Updated data protection impact assessment to reflect recent changes to the app and digital contact tracing functionality (provided by Apple and Google). Includes updates on virology testing, design objectives, coronavirus testing at scale, self-isolation countdown (isolate) and data dictionary.

  29. Updated with links to guidance for England and Wales.

  30. Updated the privacy notice to reflect changes to the app to align with testing policy for the user’s country (England or Wales), based on their local authority, which includes confirmatory testing. Added more detail about the service monitoring of the app’s functionality (in the section ‘Function: all features’).

  31. Updated 'Ap COVID-19 y GIG: Hysbysiad Preifatrwydd i Bobl Ifanc (privacy notice for young people, Welsh language)' to reflect recent changes to the app and digital contact tracing functionality (provided by Apple and Google). Includes updates on the use of local authority and postcode district, the updated digital contact tracing and analytical data set and option to support for applications for self-isolation payment.

  32. Updated 'Ap COVID-19 y GIG (Welsh language privacy notice)' to reflect recent changes to the app and digital contact tracing functionality (provided by Apple and Google). Includes updates on the use of local authority and postcode district, the updated digital contact tracing and analytical data set and option to support for applications for self-isolation payment.

  33. Updated data protection impact assessment to reflect recent changes to the app and digital contact tracing functionality (provided by Apple and Google). Includes updates on the use of local authority and postcode district, the updated digital contact tracing and analytical data set and option to support for applications for self-isolation payment.

  34. Updated 'NHS COVID-19 app: privacy notice', 'NHS COVID-19 app: privacy notice for young people' and 'NHS COVID-19 app: privacy information (Easy Read)' to reflect recent changes to the app and digital contact tracing functionality (provided by Apple and Google). Includes updates on the use of local authority and postcode district, the updated digital contact tracing and analytical data set and option to support for applications for self-isolation payment.

  35. Updated privacy notices to detail the recent changes to the app and digital contact tracing functionality (provided by Apple and Google). Includes updates on the use of local authority and postcode district, the updated digital contact tracing and analytical data set.

  36. Updated 'privacy notice for young people, Welsh language' to reflect the changes in the app and work to support digital contact tracing apps across England, Gibraltar, Jersey, Northern Ireland, Scotland and Wales.

  37. Updated Welsh language privacy notice and easy read to reflect the changes in the app and work to support digital contact tracing apps across England, Gibraltar, Jersey, Northern Ireland, Scotland and Wales.

  38. Updated privacy notices and information, and data protection impact assessment to reflect the changes in the app and work to support digital contact tracing apps across England, Gibraltar, Jersey, Northern Ireland, Scotland and Wales.

  39. Added Welsh language versions of privacy notice for young people and the Easy Read: 'Ap COVID-19 y GIG: Hysbysiad Preifatrwydd i Bobl Ifanc' and 'Ap COVID-19 y GIG: Hysbysiad preifatrwydd'.

  40. Added Welsh language version of the privacy notice: 'Ap COVID-19 y GIG '

  41. Added new and updated privacy notices for national launch of the app, including an updated data protection impact assessment.

  42. First published.

Sign up for emails or print this page