COVID 19 - Sharing data with community organisations
Purpose and lawful basis for processing
Data about vulnerable people resident in North Devon and data about key contacts for local COVID 19 resilience support is being shared with North Devon Council to enable it to support such people along with those who have no other support mechanisms in place to help during the current COVID 19 pandemic.
The lawful bases we rely on to process personal data are as follows:
- Article 6(1)(d) of the GDPR, which allows us to process personal data where this is necessary when individuals' health and safety is at risk; and
- Article 6(1)(f) of the GDPR, which allows us to process personal data where this is necessary in the legitimate interests of us as data controller or a third party (such as the UK government which has asked local authorities to carry out this task as a matter of priority during the current pandemic and has shared data for this purpose)
If the information we collect or process to assist vulnerable people and those identified as in need contains special category data, such as health data, the lawful bases we rely on to process it is article 9(2)(c) of the GDPR where the information must be provided to save someone's life (and their consent cannot be obtained) or article 9(2)(g) of the GDPR where the provision of this information would protect a person at risk (ie. it can be shown that it is in their substantial interests).
What we need
We have been supplied with personal data collected by the UK Government and passed to Devon County Council and then passed to us to deal with at a district level. Information about key local community contacts has been collected by the Devon Association of Local Councils (DALC) and passed to us. As set out above this is being shared with North Devon Council to enable it to support vulnerable people and those who have no other support mechanisms in place to help during the current COVID 19 pandemic.
What we do with it
We will use the personal data provided by the UK Government, along with records that we hold to contact the individuals identified and coordinate community and voluntary groups (including One Barnstaple, One Ilfracombe, One South Molton, One Northern Devon and the Braunton Community Network as well as other links in parishes across North Devon) to assist them depending on their need, for instance going shopping for them or collecting prescriptions.
How long we keep it
For information about how long we hold personal data, see our Retention Schedule.
What are your rights?
We are acting pursuant to our and the UK Government's legitimate interests in respect of acting on behalf of the Council and the UK Government to protect vulnerable individuals and those in need in our area. You therefore have the right to object to our processing of your personal data. There are legitimate reasons why we may refuse your objection, which depend on why we are processing it. For more information on your rights see Your Rights.