Question to the Department of Health and Social Care:

To ask the Secretary of State for Health and Social Care, what redress mechanisms for data subjects are in place in respect of the personal data collected by the new covid-19 tracing app being developed by NHSX.

Identifiable data is not collected into the app, nevertheless we are applying the rights and obligations of the General Data Protection Regulation. The requirements of the United Kingdom’s data protection legislation are administered and enforced independently of the Government by the Information Commissioner. If somebody has concerns about how their information has been used they should, in the first instance, contact the Data Protection Officer for the Department. If they remain unsatisfied, they can refer the matter to the Information Commissioner’s Office.