Question to the Department of Health and Social Care:

To ask the Secretary of State for Health and Social Care, if he will ensure that data collected through the covid-19 tracking application will not be used for reasons other than tracking for covid-19; and that data will not be sold by service providers.

Any data that app users have chosen to share with the National Health Service may be retained for research in the public interest, or by the NHS for planning and delivering services. This is in line with the law and subject to all the necessary approvals required by law. We have published a Data Protection Impact Assessment and a Privacy Notice that specify how the data collected via the app will be used and for what purposes.

Companies working with the NHS are bound by robust contract and data processing agreements that specify how and when the data must be stored, secured, used and destroyed. Private commercial companies do not have access to personally identifiable data.