In Brief

UK’s Covid track-and-trace programme ‘breaks data protection law’

Campaigners voice concerns after Health Department admits failing to carry out privacy impact assessment

The UK government’s coronavirus track-and-trace scheme breaks data privacy law, according to campaigners.

The accusation comes after the Department of Health and Social Care (DHSC) conceded in a letter to the Open Rights Group (ORG) that the programme was launched without an assessment of its impact on privacy.

The activist organisation say the disclosure means the track-and-trace programme has been “unlawful” since coming into operation at the end of May.

The admission from the DHSC followed threats from the group “to go to court to force the government to conduct a data protection impact assessment (DPIA) - a requirement under the General Data Protection Regulation (GDPR) for projects that process personal data”, the BBC reports.

But while admitting that no such assessment has been conducted, the “DHSC says there is no evidence data has been used in an unlawful manner”, adds the Daily Mail.

A spokesperson for the department said: “NHS Test and Trace is committed to the highest ethical and data governance standards - collecting, using, and retaining data to fight the virus and save lives, while taking full account of all relevant legal obligations.”

Despite such reassurances, “ORG is just one group to raise privacy concerns over the scheme, with a former cabinet minister also previously warning of ‘serious errors’ in its implementation”, says the newspaper.

Last month, Labour’s Lord Hain alleged that the NHS had failed to carry out legal data protection obligations prior to the launch and had entered into data sharing relationships “on unnecessarily favourable terms to large companies”, The Telegraph reports.

ORG executive director Jim Killock told BBC Radio 4 today that “the government is simply not going through the basic checks to make sure the system is safe to operate”.

“They failed to conduct a data protection impact assessment and that means they haven’t done the basic check to make sure data is handled safely.” Killock added.

Fears that track-and-trace technology could violate privacy laws have caused problems in a number of other countries. Norway deleted its app in June after the system was shown to have breached the Nordic nation’s data privacy laws. 

UK Treasury figures show that Downing Street is spending £10bn on Britain’ track-and-trace rollout. An app has been trialled on the Isle of Wight, but the government has suggested it may not be ready to launch across the rest of the UK until winter.

Recommended

How Omicron compares to other variants of concern
Kent variant
Getting to grips with . . .

How Omicron compares to other variants of concern

‘A nationalistic approach to global issues does not work’
Nigel Farage and Donald Trump
Instant Opinion

‘A nationalistic approach to global issues does not work’

Is ‘Megxit’ misogynistic?
Meghan and Harry in black tie
Why we’re talking about . . .

Is ‘Megxit’ misogynistic?

The race to test if vaccines hold up against Omicron
Moderna lab
Behind the scenes

The race to test if vaccines hold up against Omicron

Popular articles

Woman diagnosed with ‘climate change’
Humber Bay Arch Bridge in Toronto
Stranger than fiction

Woman diagnosed with ‘climate change’

Vladimir Putin and his mysterious love life
Vladimir Putin and his now ex-wife Lyudmila Putina
Profile

Vladimir Putin and his mysterious love life

Trump ‘upset his son won’t say he loves him’
Donald and Barron Trump
Tall Tales

Trump ‘upset his son won’t say he loves him’

The Week Footer Banner