In order to provide support to vulnerable people (including those asked to shield themselves in a letter from the Chief Medical Officer) who have been asked to self-isolate during the Covid 19 (coronavirus) pandemic, the Welsh Government and public sector partners will be processing the personal identifiable data of those people. The data will be collected from multiple sources, including directly from vulnerable people or their carers by telephone or via the internet. We will only collect the information that is necessary to support those vulnerable people in Wales.
The Welsh Government will be the data controller for the personal data it collects. We will process this data in pursuance of our public task and the official authority vested in us. Where the information amounts to special category data we will process it in the substantial public interest of protecting vulnerable people.
The data will be processed to support vulnerable people during the coronavirus epidemic through the development and management of essential support services, and enable the delivery of essential items to those most at risk, including food and medication.
We will share necessary information with third parties, such as public sector partners, including local authorities. We will also share personal information with private sector partners including food supply companies. We will only share personal data insofar as it is necessary to support vulnerable people.
Personal data provided to Welsh Government is stored on secure servers. Personal, identifiable data shared with our public sector partners and 3rd party suppliers will only be transferred using existing, accredited secure data transfer systems wherever possible. Only data absolutely necessary for the delivery of support to vulnerable persons will be shared.
Personal identifiable data held by Welsh Government will be retained for up to 6 months after the full lifting of restrictions on movement and the coronavirus epidemic. After this time personal data will be securely destroyed.
Under GDPR, you have the following rights in relation to the personal information you provide us to enable to support you, specifically you have the right:
- To access a copy of your own data;
- For us to rectify inaccuracies in that data;
- To object to or restrict processing (in certain circumstances);
- For your data to be ‘erased’ (in certain circumstances); and
- To lodge a complaint with the Information Commissioner’s Office (ICO) who is our independent regulator for data protection.
The contact details for the Information Commissioner’s Office are: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Phone: 01625 545 745 or 0303 123 1113. Website: www.ico.gov.uk
If you have any further questions about how the data provided will be used by the Welsh Government or wish to exercise your rights using the General Data Protection Regulation, please contact the Welsh Government’s Data Protection Officer at:
Welsh Government, Cathays Park, Cardiff, CF10 3NQ,