On 28 September 2020, the government passed into law a national Test and Trace Support Scheme. From 12 October 2020, a one-off payment of £500 or access to a discretionary fund will be available for eligible individuals. View more information on the Test and Trace Support Scheme.
If you apply, we will need to process your personal data to assess whether you are eligible to receive financial support, and if so, to provide a payment to you.
This Privacy Notice sets out what personal data we will use, how we will use it, and why we need to, when an applicant applies for this support.
The Department of Health and Social Care (DHSC) has commissioned NHS Test and Trace on behalf of the government and is the data controller for the purposes of providing Test and Trace data to Chorley Council.
We are the data controller for the purposes of assessing eligibility, administering and making payments under the Test and Trace Support scheme.
If you have been told by the NHS to self-isolate, either because you have tested positive for COVID19 or you have been in contact with someone who has tested positive, you may be entitled to some financial support during your self-isolation period.
People who are eligible will receive:
We collect and process the personal data that you provide to us when completing your application for a self-isolation support payment, which may include:
We will obtain data from the NHS Test and Trace Service to confirm that you have either tested positive for COVID-19 or you have been in close contact with someone who has tested positive for COVID-19. As this data is related to your health it is referred to as 'special category data'.
You or your nominated representative will also provide us with additional personal data in relation to your application for a Self-Isolation Payment.
We will carry out checks with the NHS Test and Trace Service and the Department for Work and Pensions (DWP), for verification purposes, Her Majesty's Revenue and Customs (HMRC), for tax and National Insurance purposes, and potentially with your employer in validating your application.
Information relating to your application will also be sent to the DHSC to help understand public health implications, allow us to carry out anti-fraud checks and determine how well the scheme is performing.
The Council has a duty to protect the public funds it administers and may use the information you have provided or share it with other bodies for the purpose of preventing and detecting fraud. This includes participation in the Cabinet Office's National Fraud Initiative.
To validate your bank account details, we need to share relevant information you have given us with TransUnion. This will be used to ensure your support payment is paid to the correct bank account and to help prevent fraudulent use of support payments.
This is not a credit check and will not impact your credit rating.
For more information on how TransUnion may use your data, please visit www.transunion.co.uk/legal-information/privacy-centre.
We will not share this data with other organisations or individuals outside of Chorley Council for any other purpose.
We will provide information to HMRC in relation to any payments we make because Self-Isolation Payments are subject to tax and National Insurance contributions. If you are self-employed, you will need to declare the payment on your self-assessment tax return.
We must have a legal basis to process your personal data. Our lawful basis in the processing that we will undertake in assessing your eligibility for, and in making any self-isolation payment to you, is based on a legal obligation.
Where we use personal information to confirm that someone is eligible for a self-isolation payment, the sections of the law that apply are:
Separately, we have special permission from the Secretary of State for Health and Social Care to use confidential patient information without people's consent for the purposes of diagnosing, recognising trends, controlling and preventing, and monitoring and managing communicable diseases and other risks to public health.
This is known as a 'section 251' approval and includes, for example, using your test results if you test positive for COVID-19 to start the contact-tracing process.
The part of the law that applies here is section 251 of the National Health Service Act 2006 and Regulation 3 of the associated Health Service (Control of Patient Information) Regulations 2002.
You can find more information by viewing the NHS contact tracing privacy notice.
These are the recipients with which your personal data is shared:
Your information will not be stored or shared outside of the UK.
We will only keep your personal data for as long as it is needed for the purposes of the COVID-19 emergency, and for audit and payment purposes.
Cookies are small text files that are placed on your browser. View more information on cookies on this site.
By law, you have a number of rights as a data subject and this does not take away or reduce these rights. Your rights under the EU General Data Protection Regulation (2016/679) and the UK Data Protection Act 2018 applies.
All information is processed in accordance with the our data protection policy.
If you are unhappy or wish to complain about how your personal data is used as part of this programme, you should contact us in the first instance.
If you are still not satisfied, you can complain to the Information Commissioners Office.
The Information Commissioners postal address is:
Information Commissioner's Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
We use appropriate technical, organisational and administrative security measures to protect any information we hold in our records from loss, misuse, and unauthorised access, disclosure, alteration and destruction. We have written procedures and policies which are regularly audited, and the audits are reviewed at senior level.
Contact the our data protection officer at firstname.lastname@example.org or write to Chorley Council, Town Hall, Market Street, Chorley, PR7 1DP.
No decision will be made about you solely on the basis of automated decision making (where a decision is taken about you using an electronic system without human involvement) which has a significant impact on you.
We keep our privacy notice under regular review, and we will make new versions available on our privacy notice page on our website. This privacy notice was last updated on 22 February 2021.