Privacy notice for Self-isolation support scheme.
If you have been told by Test Trace and Protect (TTP) to self-isolate, either because you have tested positive for COVID-19 or you have been in contact with someone who has tested positive, you may be entitled to some financial support during your self-isolation period. People who are eligible will receive a £500 self-isolation support payment or provision from the discretionary fund to remain at home to help stop the spread of the virus.
If you apply for this payment we will need to process your personal data to assess whether you are eligible to receive financial support, and if so, to provide a payment to you. This Privacy Notice sets out what personal data we will use, how we will use it and why.
Welsh Government will be the data controller for the personal data we collect via your application for the purposes of assessing eligibility, administering and making payments under the Self-Isolation Support Scheme and we will process it in line with our public task and the official authority vested in us. Where your information amounts to special category data we will process it for reasons of substantial public interest in the area of public health.
We will also collect and match your information with other data held by other public bodies such as:
- The Department for Work and Pensions (DWP) for information about the benefits you are in receipt of such as Universal Credit, Jobseeker’s Allowance, Employment Support Allowance)
- Her Majesty’s Revenue and Customs (HMRC) for information on your employment status
- NHS Wales Informatics Service (NWIS) for confirmation of your isolation status on the TTP system
We will also obtain data from the TTP Service to confirm that you have either tested positive for COVID-19 or you have been in close contact with someone who has tested positive for COVID-19.
Your local authority
Your local authority in Wales has been engaged by us as a data processor for these purposes and will deal with applications from those resident within their boundaries. They will carry out checks with the TTP Service to verify that you have either tested positive for, or have been in close contact with, someone who has tested positive for COVID-19.
We will also ask your local authority to carry out checks with the DWP to verify whether you or your partner are in receipt of a qualifying benefit and to carry out checks with HMRC to confirm your employment status.
If your application is successful, we will ask your local authority to provide information to HMRC in relation to any payments made to you because self-isolation support payments are subject to tax and National Insurance contributions. If you are self-employed, you will need to declare the payment on your self-assessment tax return.
We will not otherwise share your data with other organisations or individuals outside of the Welsh Government for any other purpose not related to the Self-Isolation Support Scheme.
Your local authority has been asked to hold all of your personal data in relation to your application for an self isolation support payment. Although the Welsh Government is the Data Controller in this circumstance, we will not normally receive any personal information about you, except in the event you wish to make a complaint, or to exercise your data protection rights under the GDPR, or in the event a local authority has identified a suspicion of fraud. In this case, your local authority will provide us with a copy of your information to enable us to respond. However, the Welsh Government does intend self-isolation support payment data held by local authorities to be included in the next National Fraud Initiative (NFI) exercise. Find out more information about the NFI.
The Welsh Government will receive anonymised data (with all identification data removed) from the Welsh local authorities for the purpose of monitoring and oversight, to aid research and better policy-making, and to evaluate the performance of the Self- Isolation Support Scheme.
We will only keep your personal data for as long as it is needed for the purposes of the COVID-19 emergency, and for audit and payment purposes. We will keep any records relating to financial transactions for a period of six years.
Under data protection legislation, you have the right:
- to be informed of the personal data Welsh Government holds about you and to access it
- to require us to rectify inaccuracies in that data
- to (in certain circumstances) object to or restrict processing
- for (in certain circumstances) your data to be ‘erased’
- to (in certain circumstances) data portability
- to lodge a complaint with the Information Commissioner’s Office (ICO) who is our independent regulator for data protection
If you wish to exercise your rights under the GDPR or wish to make a complaint relating to the processing of you data, you should contact firstname.lastname@example.org.
Alternatively, you can contact the Welsh Government Data Protection Officer at:
Data Protection Officer
The contact details for the Information Commissioner’s Office are:
Phone: 01625 545 745 or 0303 123 1113
Changes to our policy
We keep our privacy notice under regular review, and we will make new versions available on our privacy notice page on our website. This privacy notice was last updated on 16 November 2020.