- Date of issue: 10 May 2022
- Date of current version: 10 May 2022
- Review date: 30 June 2022
The reasons why we use your personal data
This privacy notice describes how we may use your information during the COVID-19 outbreak. It supplements our COVID-19 Privacy Notice.
This privacy notice applies to the functions of the Public Health and Customer Services Teams that have begun a vaccine confidence programme to make direct contact inviting those who have not yet had any or all of their COVID-19 vaccinations to take up the vaccination offer and to provide support or advice to do this.
What processing of personal data is undertaken by the team
Individuals may be contacted by phone, text, or email in order to take up the vaccination offer. Personal data will be securely shared by GP surgeries with designated staff within the Surrey County Council Customer Services Team.
What information do we collect?
- NHS number
- GP practice
- Phone number
- Email address
- Age range
- Date of birth
- Vaccination Status
This data is for adults who are recorded as not having received any doses or are not fully vaccinated against COVID-19.
No health records or health data is shared other than these.
How we are allowed to use your personal data
The use of your information is covered by the General Data Protection Regulations (GDPR).
The section of the GDPR that applies is:
Article 6(1)(e) 'processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller'
As information about health is a special category of personal information, a further section of the GDPR applies:
Article 9(2)(i) 'processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of healthcare'
Secretary of State for Health & Social Care notice under Regulation 3(4) of the Health Service (Control of Patient Information) Regulations 2002 (COPI) to require organisations to process confidential patient information for purposes set out in Regulation 3(1) of COPI.
You will be asked whether you have received an invitation to book a vaccination appointment. You are not required or obligated to discuss your vaccination status, but you will be offered support and advice about the vaccine and how to locally obtain the vaccination. With your consent, the call handler may also offer to arrange this on your behalf or if you wish to receive specific advice about the vaccine from a clinician or your GP, the call handler may arrange this to be scheduled for you.
If, during a phone call, you do not wish to discuss whether you have received an invitation to obtain the COVID-19 vaccine or to be provided advice or support to obtain the COVID-19 vaccine, you may decline the offer and terminate the call and you will not be further contacted by Surrey County Council.
Who we share your personal data with
We are conducting this programme using a data sharing agreement with individual GP surgeries.
The data will not be shared with any third parties. If information regarding views or opinions of the COVID-19 vaccine are voluntarily provided, this may be noted anonymously for feedback purposes for improvement on the provision of advice and support.
Retention of data
Phone calls may be recorded for monitoring purposes. Recordings of phone calls will be retained for no longer than 62 days and then automatically securely deleted. Please see our data protection statement on recorded calls for further details.
Data will be retained until the end of the exercise at which time personal data will be deleted, unless this is superseded by a stop notice in relation to the Covid-19 Public Inquiry. Any data reported will be anonymised. All processing of data will cease on the date of the expiry of the Secretary of State for Health and Social Care's COPI Notice dated 22 February 2022 (due to expire 30 June 2022).
For further information on our privacy notice, please see information and privacy.