Your Privacy and NHS Test and Trace
- What do we need to know and what data will we collect?
- Why are we asking for this information?
- Whose information will we collect?
- What will we do with the information?
- Who is processing your information?
- How will we use the information we hold about you?
- Who will we share your information with?
- How long will we keep your personal information?
- Which laws allow us to process your personal data?
- Your rights
To help contribute to the prevention of the spread of Covid-19, if you are visiting the Supreme Court we will collect your data and some information about you. The Government has asked organisations to do this in order to help to seek to keep you safe through NHS Test and Trace.
What do we need to know and what data will we collect?
If you are visiting the Supreme Court we will ask you to give us the following information upon arrival:
- Your name
- Your telephone number and/or email address
If you are visiting in a group, we will ask for information about one person (the lead member of the group).
Why are we asking for this information?
The Government guidelines ask us to do this in order to use NHS Test and Trace to reduce the risk of a further COVID-19 outbreak.
When you share your information with us, this means that NHS Test and Trace will be able to quickly identify people who have come into contact with someone who has tested positive for COVID-19. NHS Test and Trace can then ask them to act in ways that keep them and others safe.
Whose information will we collect?
We will collect this information about all visitors entering the Supreme Court building, albeit as indicated for groups we would seek the information from the lead member of the group.
What will we do with the information?
We will keep this information about you for these purposes, for as long as it is needed for use by the NHS Test and Trace service. We won't keep it longer than it is needed for those purposes.
If the information is requested by the NHS Test and Trace service, we will share it with them so they can use it for contact tracing and to investigate local outbreaks of COVID-19.
Who is processing your information?
The UK Supreme Court (as the data controller).
How will we use the information we hold about you?
If we are asked, we will supply the NHS Test and Trace service with the information of visitors who may have been exposed to COVID-19.
This is so the NHS Test and Trace service can:
- provide testing for anyone who has symptoms of COVID-19 to find out if they have the virus;
- contact anyone who has had a positive test result to share information about any close recent contacts they have had; and
- alert those contacts, where necessary, to let them know that they need to self-isolate to help stop the spread of the virus.
Who will we share your information with?
We will share your information with the NHS Test and Trace system if a visitor to the Supreme Court who has been tested as positive for COVID-19. In this case, we will share with NHS Test and Trace contact information for our staff and any visitors who may have come into contact with the visitor who has tested positive.
If a visitor informs us that they have tested positive for COVID-19, we will contact the NHS Test and Trace service and provide them with details of staff and any visitor who may have come into contact with the visitor who has tested positive.
We will not share your information with anyone else, unless we are required to do so by law, for reasons of public safety and in risk of harm or emergency situations.
How long will we keep your personal information?
We will keep your contact information for 21 days so that we can respond to the NHS Test and Trace data requests. We may keep your contact details you provided when you purchased a ticket for longer than 21 days as per our standard policy for the purposes of customer record keeping.
Which laws allow us to process your personal data?
The General Data Protection Regulation requires specific conditions to be met to ensure that the processing of personal data is lawful. These relevant conditions include:
- Article 6(1)(c) - Legal Obligation in that we have a legal obligation under the Health and Safety at Work Act 1974 to ensure the safety of visitors and our staff.
- Article 6(1)(f) - Legitimate Interest in that collecting the data is in the interests of the individual, the Court and the public health efforts to tackle COVID-19.
If you are not happy about the way your personal data is being processed, you can complain directly to us by email: email@example.com.
You also have the right to complain to the Information Commissioner's Office:
The Information Commissioner's Office
0303 123 1113