Question to the Department of Health and Social Care:
To ask Her Majesty's Government when the NHSX Ethics Advisory Board approved the Data Processing Impact Assessment, including its risk registers, for the NHSX COVID-19 contact tracing application.
The Ethics Advisory Board (EAB) is an advisory body and does not approve documentation. Notwithstanding, and in the interests of transparency, an early draft of the Data Protection Impact Assessment (DPIA) was shared with the EAB on 29 April and subsequently developed.
Further DPIAs will meet the best practice guidance set out by the Information Commissioner’s Office and will be iterated for every stage of the rollout.