LYPFT COVID-19 Lateral Flow Testing – Smart Survey Privacy Notice

Leeds and York Partnership NHS Foundation Trust (“the Trust”) are using this Smart Survey tool to record and communicate information relating to employee COVID-19 lateral flow testing.

Leeds and York Partnership NHS Foundation Trust are the accountable Data Controller for data processed by the lateral flow testing team.

Contact addresses are as follows:-
 

Head Office	Data Protection Officer
2150 Thorpe Park Century Way Leeds LS15 8ZB	Carl Starbuck St Marys House, North Wing, St Martins View Leeds LS7 3LA

The lateral flow testing team will collect, store and process information relating to the LFT tests you undertake, which will be limited to the following, which you will submit at the following Smart Survey website:- Covid Lateral Flow Testing (smartsurvey.co.uk)

• Your work e-mail address
• The date of the test
• The outcome (positive, negative, or invalid)

Information relating to the confidentiality of the Smart Survey tool can be found at the website below. We use Smart Survey as they adhere to the highest standards of data security and confidentiality and comply with standards dictated by the NHS for processing healthcare data.

https://www.smartsurvey.co.uk/privacy-policy

In completing and submitting the form, you should be aware that this information will be shared appropriately with NHS England and NHS Digital. The legal basis for the processing of this information will be:-

• Your contract of employment with the Trust (UK-GDPR Article 6-1-b)
• Because it is in the substantial public interest and within the official authority of the Trust (UK-GDPR Article 6-1-e)
• Because, in respect of the special category (healthcare data) processed, it is in the substantial public interest and is proportionate to the aim pursued (UK-GDPR Article 9-2-g)
• Because, in respect of the special category (healthcare data) processed, it relates to preventative or occupational medicine, assessing the working capacity of you as an employee, and the management of health and social care systems / services (UK-GDPR Article 9-2-h)
• Because, in respect of the special category (healthcare data) processed, it relates to the public interest in public health and protecting against serious cross-border threats to health (UK-GDPR Article 9-2-i)

The processing of your information also has a mandate under the conditions of the “Control of Patient Information” (COPI) Notice issued by the Secretary of State for Health & Social Care in respect of data processing required to manage the COVID-19 pandemic.

Other than as described above we will not share your information unless required to do so by law.

The lateral flow testing team will not process your personal data outside the UK, although Smart Survey operate their systems (and thus store your data) on UK or EU servers, however any EU processing of your data is protected by industry standard security and the legal protection of the EU General Data Protection Regulation – as it is in the UK.

We will retain and subsequently securely dispose of your information in accordance with the requirements of the NHS Records Management Code of Practice, and in accordance with the “Control of Patient Information” (COPI) Notice issued by the Secretary of State for Health & Social Care in respect of data processing required to manage the COVID-19 pandemic.

You have a right to request a copy of any and all records that the lateral flow testing team holds about you, which we will provide to you within 30 days of receiving your written request.

We will correct any factual errors within your records.

Should you wish to exercise your data protection rights, in the first instance contact the Trust Data Protection Officer.

You have a statutory right to raise a complaint with the Information Commissioner’s Office if you feel we have failed to honour your rights under Data Protection legislation.