Question to the Department of Health and Social Care:

To ask the Secretary of State for Health and Social Care, what data privacy and control standards will be required of organisations working collaboratively with NHSX on the covid-19 tracking app.

Companies working with the National Health Service are bound by robust contract and data processing agreements that specify what they can do with the data, how and when the data must be stored, secured, used and destroyed. Private commercial companies do not have access to personally identifiable data. If app users choose to share their information with the NHS, it will remain under the control of the NHS throughout. The Information Commissioner’s Office has been working with NHSX to help ensure a high level of transparency and governance.