Does the NHS COVID-19 app protect your privacy?
The app has been designed with user privacy in mind, so it tracks the virus, not people and uses the latest in data security technology to protect privacy. The system generates a random ID for an individual's device, which can be exchanged between devices via Bluetooth (not GPS).
These unique random IDs regenerate frequently to add an extra layer of security and preserve anonymity. The app does not hold personal information such as your name, address or date of birth, and only requires the first half of your postcode to ensure local outbreaks can be managed.
How does the National Health Service (NHS) app protect user's privacy?
The technique used to provide app users with their correct result also ensure that the identity of the user is protected. When the app recommends a test for users it requests three separate tokens. These are generated by services outside of the app and are not recorded in the app. They are unique and anonymous and cannot be derived from each other or any other information.
These three tokens allow the correct information to be returned to the correct user whilst maintaining their privacy and ensuring that data cannot be linked. We dealt the tokens promptly once we’ve updated the relevant app.
Does the NHS COVID-19 app hold any data?
We need to make sure that we update your app with the correct test results if you require a COVID-19 test. Other than this instance:
• The Apple Google Contact Tracing functionality requires users to anonymous and this is a condition of our use of the EN API
• The app holds personal data, however, we do not collect personal data. For example, your app will hold details of the venues you have visited but this is not shared with us
• The analytical data set is based on summaries and counts of functions. It is not cumulative and does not hold specific details. From the point it is collected throughout its analysis and use, we have safeguards to ensure that individuals are not identifiable
• We monitor and consider our controls to make sure we maintain this standard and look for ways to improve them. See the Privacy Risk in the DPIA for a description of this work
How does the NHS COVID-19 app protect users' anonymity while tracking the cases?
The app uses complex cryptography to protect you and other app users' anonymity while enabling diagnosis keys to be matched with a relevant broadcast key when relevant. Where there are matches, you will get an alert that you've been in contact with someone who tested positive.
Does the NHS COVID-19 app track my location?
It does not record or track where you or other app users are (for example, at home or in a public space). The app does not identify you or your location to other app users (or, as noted above, the government).
38 related questions foundHow does the NHS COVID-19 app contact tracing work?
When you download the app to your phone, a code will be generated which will identify the app’s existence on your device.
This code changes every day (a ‘daily code’), so that it cannot be associated with you or your phone.
Your app produces another randomly generated code every 15 minutes (known as ‘the broadcast code’). The broadcast code is collected by the app installed on other users’ phones when you come into close contact with them and is held there for 14 days.
How often does the National Health Service (NHS) app update data?
The app is updated by the central systems (product environment), on average, every 2 hours. The central system provides all app users with three key sets of data. Every app user receives the same information, called reference material, which the app uses to determine if you need to receive an alert or advice. These are:
• the list of Diagnosis Keys from app users who have tested positive. This functionality keeps the identity of app users anonymous to other app users
• the list of all postcode districts and their current risk level
• the list of venues that could pose a risk, as determined by Health Protection Teams and the Joint Biosecurity Centre (JBC)
How does the National Health Service (NHS) app prevent re-identification?
Only those with access to the app will have details of the venues checked into. No details about which venues a user has checked into is included in the analytical data set or provided to the use.
Does the COVID-19 app collect personal data?
• The app holds personal data, however, we do not collect personal data. For example, your app will hold details of the venues you have visited but this is not shared with us
Does the NHS COVID-19 app delete my data if I delete the app?
If you choose to delete the app, you will not receive any notifications (alerts) from the app about coronavirus (COVID-19) and the data stored by the app on your phone will be deleted. If you decide to install the app again, you will need to provide the requested information again.
Can I delete the COVID-19 app?
Right to be forgotten. You can choose to delete the app and the data it contains.
Which organisations process personal data from NHS COVID-19 app?
The ones that will be processing personal data are:
•Amazon Web Services (AWS) which hosts the central system (cloud server) that supports the app
•The Health Informatics Service (THIS), which is hosted by the Calderdale and Huddersfield NHS Foundation Trust. THIS provides the ‘NPEx’ system which provides test results to the app (using the test code unique to the app)
These organisations can only work under instruction from DHSC and cannot use information they process for any other purposes
Which company designed the NHS COVID-19 app to protect the privacy and identity of the users?
This system is designed by Apple and Google to protect the privacy and identity of app users, making their use of the app anonymous.
Can personal data collected for NHS Test and Trace be used for other purposes?
Personal data that is collected for NHS Test and Trace, which you would not collect in your usual course of business, must be used only to share with NHS Test and Trace.
It must not be used for other purposes, including marketing, profiling, analysis or other purposes unrelated to contact tracing, or you will be in breach of GDPR. You should make your staff aware of what they should and shouldn't do with customer information.
What are public health and social measures (PHSMs)?
Public health and social measures (PHSMs) are measures or actions by individuals, institutions, communities, local and national governments and international bodies to slow or stop the spread of an infectious disease, such as COVID-19.
How long after having COVID-19 can I get the spring booster vaccine?
If you are unwell, wait until you have recovered to have your vaccine. If you have had confirmed COVID-19 you should ideally wait 4 weeks before having your spring booster.
Can you still get Covid after vaccine?
Like all medicines, no vaccine is completely effective, so you should continue to take recommended precautions to avoid infection. Some people may still get COVID-19 despite having a vaccination, but this should be less severe.
Can you still catch COVID-19 after having the booster vaccine?
Can you still catch COVID-19 after having the vaccine? The COVID-19 vaccination will reduce the chance of you suffering from COVID-19. It may take a few days for your body to build up some protection from the booster.
How does Evushield for COVID-19 work?
Developed by AstraZeneca, Evusheld is a combination of two long-acting antibodies that works by binding to the spike protein on the outside of the SARS-CoV-2 virus, the virus that causes COVID-19. This in turn prevents the virus from attaching to and entering human cells.
Can I have close contact with people if I'm wearing a mask during COVID-19?
While wearing a mask, you should still keep physical distance from others as much as possible. Wearing a mask does not mean you can have close contact with people.
Who provides the digital contact-tracing technology used in the NHS COVID-19 app?
The digital contact-tracing technology used in the NHS COVID-19 app is provided by Apple and Google. This technology is known as the ‘Google Apple Exposure Notification system’ (or ‘GAEN’). GAEN, operating systems and data available from this system are constantly being refined.
These updates change the data that can be collected. They also make additional data items available which can help understand and manage public health.
GAEN can provide measurements around the interactions of users. For example, when you update your status in the app with a positive COVID-19 test result (and share your diagnosis keys), GAEN helps the app generate data to understand the level of risk of infection for other app users.
What is the UK regulatory agency for monitoring COVID-19?
The Medicines and Healthcare products Regulatory Agency is responsible for protecting and improving the health of millions of people every day through the effective regulation of all medicines and medical devices in the UK by ensuring they work and are acceptably safe.
Who issued the official name of COVID-19?
The official names COVID-19 and SARS-CoV-2 were issued by the WHO on 11 February 2020.
What are some of the common side effects of the COVID-19 vaccine?
Some recipients have reported chills, shivering (in some cases rigors), and increased body temperature possibly with sweating, headache (including migraine-like headaches), nausea, myalgia and malaise, starting within a day of vaccination. These effects usually lasted for a day or two.
Are you required to register for the COVID-19 testing program?
The test is completely voluntary. You can cancel the test that you’ve booked if you no longer need it. If you do decide to take a test, then you need to follow the instructions provided. As part of the registration process, we will send you a confirmation email with the details of your order or booking. If you are attending a test site, it is necessary to bring this with you.
