Security News > 2020 > June > Legal complaint lodged with UK data watchdog over claims coronavirus Test and Trace programme flouts GDPR

Open Rights Group has instructed lawyers to lodge a complaint with the UK's data watchdog over the rollout of the Test and Trace system because it says the system breaches the General Data Protection Regulation.

The complaint to the ICO relates to the failure by the NHS and Public Health England, which runs the Test and Trace programme, to conduct a Data Protection Impact Assessment, which is required under the GDPR before processing of data in high-risk situations.

The Open Rights Group argues that because Test and Trace is experimental, and processes data of a sensitive nature on a large scale, a DPIA was required before data processing started.

"The Open Rights Group has instructed Ravi Naik, legal director of the data rights agency AWO, who said:"Rushing out Test and Trace without following basic legal requirements is troubling.

It committed to provide this document to the ICO next week, saying: "Public Health England has taken careful steps to ensure that the NHS Test and Trace complies with its legal obligations and will publish the Impact Assessment on the NHS Test and Trace website, alongside the existing privacy notice, as soon as possible after consulting with the ICO.".

News URL

https://go.theregister.com/feed/www.theregister.com/2020/06/04/test_and_trace_ico_gdpr_complaint/