Privacy and the Coronavirus pandemic

Privacy Notice relating to Covid-19

This privacy notice explains how Buckinghamshire Council will use personal data in response to the Coronavirus pandemic.

Processing activity

The purposes for which your data will be used include:

  • To prevent or mitigate the impact of the virus
  • To record people who may be vulnerable to the virus or otherwise require support due to the virus
  • To identify people who may be vulnerable to the virus or otherwise require support due to the virus and targeting support where required
  • To share information with other organisations to allow them to help people who need it
  • To record details of volunteers who are willing to help us
  • To share details of volunteers with other organisations to help with resourcing
  • To share information with other organisations who are allowed to process confidential information in relation to Covid-19 purposes as defined by the Secretary of State

Data requirements

Depending on the service you are using this data may include: 

  • Name
  • Contact details (e.g. phone number, email address)
  • Address
  • Date of birth
  • Any information which could be used to identify people who are vulnerable to the virus or otherwise require support due to the virus (e.g. health information)

Any information which illustrates a person’s needs (e.g. health information)

Lawful basis for processing

The lawful bases for processing your personal data are:

  • Legal Obligation – we need to process the personal data to comply with a statutory obligation (Article 6(1)(c)) 

The Health Service (Control of Patient Information) Regulations 2002 r3(4)

The Civil Contingencies Act 2004

  • Public Task – we need to process the personal data in the exercise of official authority (public functions and powers that are set out in law) or to perform a specific task in the public interest that is set out in law (Article 6(1)(e)) as supplemented by DPA2018 s8(c))

The Civil Contingencies Act 2004

The Local Government Act 1972 s139

  • Substantial Public Interest as supplemented by DPA2018 s10(3) and Schedule 1 Part 2 Para 6

The Civil Contingencies Act 2004

  • Consent (Article 6(1)(a))

Data sharing

We may share data with the following:

  • Other Council services, public bodies and authorities
  • Central Government
  • Emergency services
  • NHS agencies
  • Healthcare organisations
  • Utility companies
  • Voluntary organisations/Volunteers

Please refer to our Corporate Privacy Policy for further details of how we process your personal data and your rights.