Vaccine Confidence – privacy notice

Details

  • Date of issue: 10 May 2022
  • Date of current version: 10 May 2022
  • Review date: 30 June 2022

The reasons why we use your personal data

This privacy notice describes how we may use your information during the COVID-19 outbreak. It supplements our COVID-19 Privacy Notice.

This privacy notice applies to the functions of the Public Health and Customer Services Teams that have begun a vaccine confidence programme to make direct contact inviting those who have not yet had any or all of their COVID-19 vaccinations to take up the vaccination offer and to provide support or advice to do this.

What processing of personal data is undertaken by the team

Individuals may be contacted by phone, text, or email in order to take up the vaccination offer. Personal data will be securely shared by GP surgeries with designated staff within the Surrey County Council Customer Services Team.

What information do we collect?

  • NHS number
  • GP practice
  • Name
  • Phone number
  • Postcode
  • Email address
  • Age range
  • Date of birth
  • Vaccination Status

This data is for adults who are recorded as not having received any doses or are not fully vaccinated against COVID-19.

No health records or health data is shared other than these.

How we are allowed to use your personal data

The use of your information is covered by the General Data Protection Regulations (GDPR).

The section of the GDPR that applies is:

Article 6(1)(e) 'processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller'

As information about health is a special category of personal information, a further section of the GDPR applies:

Article 9(2)(i) 'processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of healthcare'

Secretary of State for Health & Social Care notice under Regulation 3(4) of the Health Service (Control of Patient Information) Regulations 2002 (COPI) to require organisations to process confidential patient information for purposes set out in Regulation 3(1) of COPI.

Consent

You will be asked whether you have received an invitation to book a vaccination appointment. You are not required or obligated to discuss your vaccination status, but you will be offered support and advice about the vaccine and how to locally obtain the vaccination. With your consent, the call handler may also offer to arrange this on your behalf or if you wish to receive specific advice about the vaccine from a clinician or your GP, the call handler may arrange this to be scheduled for you.

If, during a phone call, you do not wish to discuss whether you have received an invitation to obtain the COVID-19 vaccine or to be provided advice or support to obtain the COVID-19 vaccine, you may decline the offer and terminate the call and you will not be further contacted by Surrey County Council.

Who we share your personal data with

We are conducting this programme using a data sharing agreement with individual GP surgeries.

The data will not be shared with any third parties. If information regarding views or opinions of the COVID-19 vaccine are voluntarily provided, this may be noted anonymously for feedback purposes for improvement on the provision of advice and support.

Retention of data

Phone calls may be recorded for monitoring purposes. Recordings of phone calls will be retained for no longer than 62 days and then automatically securely deleted. Please see our data protection statement on recorded calls for further details.

Data will be retained until the end of the exercise at which time personal data will be deleted, unless this is superseded by a stop notice in relation to the Covid-19 Public Inquiry. Any data reported will be anonymised. All processing of data will cease on the date of the expiry of the Secretary of State for Health and Social Care's COPI Notice dated 22 February 2022 (due to expire 30 June 2022).

Other information

For further information on our privacy notice, please see information and privacy.