As we've previously reported on, pubs, restaurants, hairdressers and other hospitality businesses, are from the 4 July able to re-open their doors. However, it is not business as usual, in addition to the expected precautionary measures such as social distancing and enhanced hygiene standards, the UK government gave businesses 10 days' notice that they are also requested to collect and record visitors' personal information as part of the national contact tracing effort.
To help businesses struggling with these requirements, and to prevent data protection from being a barrier to their recovery, the UK data protection authority, the ICO, has introduced an ABC guide focusing on how to implement new GDPR compliant contact tracing measures.
Key themes are:
- Choose the solution which works best for you, there is no need to develop, or sign up to new apps or digital solutions;
- Only access the contact tracing information you need (e.g. name, contact details, time of arrival). There's no need to ask for ID if you don't already do it;
- Inform customers of why you need their information and what you will do with it. You can do this by displaying a notice, including it on your website or just telling people;
- Keep the information secure;
- Only use the information for contact tracing purposes - the information should not be used for marketing purposes;
- Erase the information after 21 days (shred paper records, delete digital records and empty the recycle bin, ensure cloud data is deleted) in line with Government guidance. For example in England, guidance from public health authorities state the information should only be kept for 21 days.
Statement from ICO, Deputy Chief Executive Paul Arnold on the important of getting the contact tracing right: “For the public health benefits to be realised from these new measures it is important people feel able to share their personal data with confidence. So people can have this trust and confidence in the way their personal data will be kept safe and used properly as they prepare to return to their favourite pubs, restaurants and local businesses, we want to help businesses to get things right first time as they adapt to new ways of working."