Question to the Department of Health and Social Care:

To ask the Secretary of State for Health and Social Care, pursuant to his oral contribution of 20 July 2020, Official Report 1865 and with reference to comments by his Department's spokesperson of 20 July 2020 that an overarching data protection impact assessment on the NHS test and trace service was in development, when that overarching impact assessment will published; for what reason he did not refer to that assessment in his oral Answer to the hon. Member for Brighton, Pavilion; and if he will make a statement.

The NHS Test and Trace programme is progressing at a fast pace of development to rise to the challenges posed by the pandemic. We are continuing to work on the overarching Data Protection Impact Assessment (DPIA). This is a live document which continues to evolve as the programme develops, as such we are meeting our obligations under the General Data Protection Regulation as implemented by the Data Protection Act 2018.

The three data protection impact assessments referred to are:

- The DPIA for the NHS COVID-19 App, of which a second iteration has now been published to coincide with the launch of the pilot phase of the new app. This can be found at the following link:

https://www.gov.uk/government/publications/nhs-test-and-trace-app-privacy-information/the-nhs-test-and-trace-app-early-adopter-trial-august-2020-data-protection-impact-assessment#the-nhs-test-and-trace-app-data-protection-impact-assessment

- The DPIA for Public Health England Contact Tracing, and;

- The DPIA for National Antigen Testing.

As internal information risk assessments documents, DPIAs are not routinely published.