NHS COVID-19 App Survey
1. Why is this data being collected?
The NHS COVID-19 App Survey is a new research study commissioned by the Department for Health and Social Care. The study will help to evaluate the success of the roll-out of a new smartphone app designed to track and trace symptoms of Coronavirus (COVID-19).
The Department for Health & Social Care has commissioned The National Centre for Social Research (NatCen) to carry out the study on their behalf. NatCen is Britain’s largest independent social research agency. For over 50 years it has worked with charities and government to find out what people really think about the big issues. NatCen is independent of all government departments and political parties.
Your personal data will only be used for research and statistical purposes. This means you will never receive any sales or marketing calls as a result of taking part in the survey.
2. What is the lawful basis for processing this data?
The legal basis for processing the data is:
Art.6(1(e) – ‘processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller’
3. Who is the data controller?
The Department for Health and Social Care is the data controller. NatCen Social Research is the data processor.
More information on the Department for Health and Social Care’s personal information charter, incorporating its privacy notice, can be found here: https://www.gov.uk/government/organisations/department-of-health-and-social-care/about/personal-information-charter
You can contact the Data Protection Officer at the Department for Health and Social Care by email at: email@example.com
4. What will happen to my data?
Taking part is completely voluntary and you can skip any questions you do not wish to answer. All data will be anonymised.
Your name and address will be kept separate from your answers. NatCen will use your personal data and responses solely for this research. No identifiable data will be shared outside NatCen (unless you agree to provide your information to take part in further research), and it will not be possible to identify you in any published results.
NatCen will only retain your data in a way that can identify you for as long as is
necessary to support the research project and findings. In practice, this means that once we have satisfactorily obtained the research data, we will securely remove your personal, identifying data from our systems. For this project we will securely remove your personal data from our systems by December 2020.
You have the right to request access to your data, to amend it if it is incorrect, or to ask for it to be deleted. The anonymised datasets will be kept indefinitely, as the survey data will continue to be useful to researchers and policy makers. For more information about your data, you can contact the NatCen Data Protection Officer by email: firstname.lastname@example.org and can read our data protection policy at natcen.ac.uk/help/privacy.
5. What purposes will your data be used for?
The data will be used to evaluate the performance of the NHS COVID-19 App.
6. Will data be shared with any third parties?
We may ask for your permission to share your information with people we work with, including government organisations and other public bodies. We would only share your information with your consent and it would only be used for research purposes. You would be able to withdraw your consent at any time.
7. Do I have to take part?
Taking part in this survey is not a statutory or contractual requirement, and participation is therefore completely voluntary.
There will be no consequences if you decide not to take part.
8. Where will my personal data be stored?
All personal data are stored securely, in line with international best practice and NatCen’s ISO27001, ISO 20252 and Cyber Essentials Plus certifications. Data will be stored on NatCen’s servers which are based in the UK.
9. Will any part of the processing be sub-contracted to a third party organisation?
Some elements of the processing, such as printing and postage will be sub-contracted. All sub-contractors working for NatCen come from our ‘Approved Supplier List’. These are suppliers that are already vetted by us with signed contracts and agreement already in place and refreshed every 12 months.
10. Will my survey answers be linked to any other information?
Your answers to this survey will not be linked to any other information.
11. Will I have access to my data?
Yes, but please note that once data is aggregated and anonymised, we would not be able to change the results by removing individual information. However, you can request that your personal data be deleted or updated and we will let you know if this is possible or not.
You have the right to access your personal data within the period that NatCen holds it. Providing responses to this survey is entirely voluntary. You have the right to withdraw your consent to our processing of your personal data at any
time, although once data is analysed it is not possible to withdraw your data from the outputs.
You also have the right to rectify any incorrect or out-of-date personal data about you which we may hold. If you want to exercise your rights, please contact us at email@example.com.
We must generally respond to requests in relation to your rights within one month, although there are some exceptions to this.
If you believe we have not complied with your data protection rights you can contact us at firstname.lastname@example.org. You also have the right to lodge a complaint with the Information Commissioner’s Office at:
Information Commissioner's Office
Telephone - 0303 123 1113