Covid 19 Privacy Notice
East Northamptonshire Council is committed to protecting your privacy when you use our services. This Privacy Notice explains how we use information about you in relation to the current pandemic (COVID-19) and how we protect your privacy.
The organisation collects and processes personal data relating to our customers, partners and staff. The organisation is committed to being transparent about how it collects and uses that data and to meeting its data protection obligations.
What information does the organisation collect?
The Council already holds data on our customers, most of which is provided to us directly by you.
We may, in this current pandemic, need to ask you for personal data, including sensitive personal data, that you have not already supplied - for example, your age or if you have any underlying health conditions or are vulnerable or if you are displaying Covid symptoms such as a cough and a high temperature or if you have been confirmed as testing positive for the virus. This is so the Council can assist you and prioritise its services and keep you and our employees safe.
We may also need to ask for more detail than usual in business situations, which for sole traders may be classed as more sensitive personal information, like bank details or other data we don’t normally hold.
If you are volunteering to provide support services we may need your contact information, and details of your current health status to protect you, and our customers.
The types of data we may process, (including collection and sharing of those we don’t already hold) in the current crisis include:
- Contact details (e.g. phone number, email address)
- Date of birth
- Payment information (e.g. bank account details for payment of business grants etc.)
- Any information which could be used to identify people who are vulnerable to the virus or otherwise require support due to the virus (e.g. health information)
- Any information which illustrates a person’s needs (e.g. health information)
- Any information which may indicate that a person has symptoms or has tested positive for the virus
The council recognise that the last three categories of personal data are classed as special category data and as such additional safeguards are in place for processing this type of data.
Covid-19 High Risk Groups
Personal data is being collected to assess and provide support to adults, children and young people who are in high-risk categories and would be considered vulnerable, if infected with Covid-19 (coronavirus).
How is the information stored?
Data is stored securely in the Council's IT systems. Access to data collected or shared for the purposes of responding to the current pandemic and ensuring services are provided to you is limited only to those who need to be able to process it.
Why does the organisation process my personal data?
We are obliged by law to process your personal data during the current pandemic under The Health Service (Control of Patient Information) Regulations 2002 r3(4) and this notice, and The Civil Contingencies Act 2004. We are also are enabled to carry out our statutory functions under The Civil Contingencies Act 2004, and the Local Government Act 1972 s139.
Where we are collecting or processing your special category data we need to do this for reasons of public health protection under GDPR Article 9(2) (i).
The data we are processing is being used for the following purposes:
- To prevent or mitigate the impact of the virus.
- To record and identify people who may be vulnerable to the virus or otherwise require support due to the virus.
- To keep our resident and our employees safe
- To share information with other organisations to allow them to help people who need it.
- To process payments you make to us to allow us to go shopping for you.
- To record details of volunteers who are willing to help us.
- To share details of volunteers with other organisations to help with resourcing.
- To process donations made to us because of the virus.
- To publish information about your donations if you give us your consent.
- To share information with other organisations who are allowed to process confidential patient information in relation to Covid-19 purposes as defined by the Secretary of State.
Who has access to data?
Where we already hold, or are now collecting, your personal information regarding vulnerability as defined in the current guidance from the Government and Public Health England, we may share this with services both inside and outside the Council including sharing with Public Health England. We will only share the minimum data necessary in all circumstances.
How we keep your information safe.
The organisation takes the security of your data seriously. Please refer to the organisations’ main privacy statement regarding keeping your information safe.
Where the organisation engages third parties to process personal data on its behalf, they do so on the basis of written instructions. They are under a duty of confidentiality and are obliged to implement appropriate technical and organisational measures to ensure the security of data and that they meet the requirements of the current data protection legislation.
Similarly where we provide information to other organisations to support you, they do so in line with strict data sharing protocols to keep your information safe.
How long do we keep your data?
The organisation will not hold any personal data collected and processed specifically for the purposes of the current pandemic for any longer than is absolutely necessary.
The periods for which any data we hold for other purposes (which may be currently being processed to support work around the pandemic) are set out in the council’s retention schedules.
Your rights and how to contact the Data Protection Officer
As a data subject, the law gives you a number of rights to control what personal information is used by us and how we can use it. Please refer to the organisations' main privacy statement regarding keeping you in control.
- Service Specific Privacy Notices
- East Northamptonshire Local Plan & Neighbourhood Plans
- Council Tax and Housing Benefit
- Economic and Commercial Development Contact Database
- Houses in Multiple Occupation(HMO) Application
- National Taxi Database (NR3)
- Central Licensing Administration Unit
- Building Control
- Employee Privacy notice
- Safety and Resilience
- Garden Waste
- External Funding
- Housing Allocation and Homelessness
- Business Rates
- Recruitment Privacy Notice
- Environmental Protection, Health Protection and Private Sector Housing Privacy Notice
- Filming and Photography
- Housing Needs
- Comms - Press Contacts Privacy Notice
- Destination Nene Valley
- Facebook Privacy Notice
- Twitter Privacy Notice
- Councillors Privacy Notice
- Finance Privacy Notice
- Monitoring Officer - Code of Conduct Complaints and Register of Interests
- The Data Protection Officer
- Land Charges Privacy Notice
- Disabled Facilities Grant
- ICT Services Wifi Service Privacy Notice
- ICT Services GIS Mapping Service Privacy Notice
- ICT Service Desk - Staff and Councillors
- Electoral Services Privacy Notice
- Customer Services Privacy Notice
- Customer Servives - My Account
- Planning Services Privacy Notice
- Community Safety, Safeguarding and the Conducting of Domestic Homicide Reviews
- Covid 19 Privacy Notice (you are here)
- Corporate Support Privacy Notice
- Chief Executive's Office Privacy Notice
- Customer Appointments
- Transfer of personal data to North and West Northamptonshire Unitary Councils