Question to the Department of Health and Social Care:

To ask the Secretary of State for Health and Social Care, what steps he is taking to ensure that NHS track and trace app complies with the provisions of the General Data Protection Regulation.

The NHS COVID-19 App uses the minimum possible personal data and all data that could directly identify a person is not stored centrally. Expertise from across the Government and industry, including the National Cyber Security Centre, has been utilised to review the design and the App. Details of the data protection measures are set out in the Privacy Notice and Data Protection Impact Assessment which is available at the following link:

https://www.gov.uk/government/publications/nhs-covid-19-app-privacy-information/nhs-covid-19-app-privacy-notice

There is an ongoing programme of monitoring and assessment to ensure that the App continues to comply with data protection law.