Question to the Department of Health and Social Care:

To ask the Secretary of State for Health and Social Care, whether his Department has made an assessment of the measures his Department needs to take to safeguard medical details recorded through a system of covid-19 vaccine passports.

A full Data Protection Impact Assessment (DPIA) was conducted to assess and mitigate privacy and data security risks. The DPIA remains a live document subject to regular iterations and reviews in line with the United Kingdom General Data Protection Regulation Articles 35 and 36. NHSX has also published a Privacy Notice on COVID-19 status certification, which is available at the following link:

https://covid-status.service.nhsx.nhs.uk/help/privacy-notice/