Our lawful basis under GDPR when using your information in response to COVID-19 are as follows:
- Processing is necessary for compliance with a legal obligation
- Processing is necessary in order to protect the vital interests of you or of another person
- Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority
- Processing is necessary for reasons of public interest in the area of public health.
If there is a significant threat to the health of the public, for instance, an outbreak of infectious disease, the council has the legal right to use identifiable data under Section 42(4) of the Statistics and Registration Service Act (2007) as amended by section 287 of the Health and Social Care Act (2012) and Regulation 3 of the Health Service (Control of Patient Information) Regulations 2002.
The council also has a statutory requirement to process confidential patient information which is contained in the NHS List Local Authority Data Flow for purposes set out in Regulation 3(1) of the Health Service Control of Patient Information Regulations 2002 (COPI) under the notice dated 20th March 2020 issued to them by the Secretary of State for Health and Social Care under Regulation 3(4) of COPI (the COPI Notice) until 20th September 2020.
Volunteers are being managed by the SMILE Foundation. With your consent we will pass your details to SMILE if you contact us so they can make arrangements for you to volunteer. More information about SMILE can be found on their website - http://heysmilefoundation.org
You can revoke your consent at any time by contacting the council.