The NHS Scotland COVID Status app (“COVID Status app”) has been created to help you show your current COVID status when travelling abroad, if necessary. The COVID Status app is a voluntary service for citizens aged 12 or over, which needs to be downloaded in the Google Play or Apple App Store.
If you have any COVID Status app queries or concerns please call the COVID Status helpline on 0345 034 2456.
This privacy notice explains how we handle and use your personal information.
The Scottish Government, with NHS National Services Scotland (“NHS NSS”), manage the COVID Status app as “joint data controllers”.
Public Health Scotland (PHS) use data in this programme for research and statistics. The reports contain anonymous statistical information only and do not contain any details that could identify you. These reports are shared with the Scottish Government and NHS Scotland Health Boards. More information can be found within the privacy notice on the PHS website.
We also use the following suppliers, who act as processors of personal data on behalf of the Scottish Government and NHS NSS. These organisations are under contract of NHS NSS:
The following supplier is also used and acts as a processor under contract of NHS Education for Scotland:
Your full name, email address, date of birth and unique password will be collected during the registration process in order for you to access the COVID Status app. You will be given the opportunity to enter your CHI Number (your unique NHS number) if you are aware of it. If not, we will retrieve this through the Community Heath Index database. We may also use your gender if you have supplied this.
If you decide to use our form process, we use the information you provide around your previous vaccinations to ensure linkage to the correct COVID Status.
We also use the IP address of your phone to understand what country you are in at the time of registering.
We then retrieve your COVID vaccination history.
We rely on the following lawful bases to process your personal data:
The data you enter for registration is kept for 365 days.
If the app is inactive for a period longer than 365 days, your registration data will be deleted.
Vaccination data used within the COVID Status app forms part of your health record, and will be kept by your health board and GP for your lifetime, plus 3 years.
Your data is stored securely on NHS servers within the United Kingdom.
NetCompany does not hold any personal data.
Microsoft Azure and Amazon Web Services do not have direct access to your personal data. They each host information within their respective cloud platforms, helping support, maintain and host our services.
Not all rights apply all of the time – for example, where there is a legal requirement for us to use your personal data, we would not be able to erase your data from our systems. All requests will be considered on a case-by-case basis.
If you’d like to get in touch with us, please call the COVID Status helpline on 0345 034 2456.
You can raise any privacy and data protection concerns with the NHS National Services Scotland Data Protection Officer (“NHS NSS DPO”) or the Scottish Government Data Protection Officer (“SG DPO”):
Email address: nss.dataprotection@nhs.scot
Data Protection Officer
Gyle Square
1 South Gyle Crescent
Edinburgh
EH12 9EB
Email address: dataprotectionofficer@gov.scot
Data Protection Officer
Victoria Quay
Commercial Street
Edinburgh
EH6 6QQ
If you have already made a complaint to us and are not happy with the outcome, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO). The ICO is the supervisory authority responsible for data protection in the UK.
The Information Commissioner
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
ICO main helpline number: 0303 123 1113
ICO Scotland office contact number: 0303 123 1115
Website: www.ico.org.uk
Last updated:
16 January 2024