Part of the national response to the Covid-19 pandemic is recording the details of who has been vaccinated against Covid-19 and when. Normally, vaccinations are undertaken in GP settings. However, with Covid-19, this will be undertaken in a variety of care settings and for the majority of health and care staff will be managed by “lead providers” on behalf of local health and care organisations. It remains the choice of the individual whether to have the vaccine, but we need to be able to share staff details with the lead providers to ensure all staff are given the chance to receive their vaccination as part of the early cohort and we must record the details of the vaccination and share that to your GP, so your health records are kept up to date.

Under GDPR, the lawful basis for processing this data is found at Articles:

6(1)(c) Processing is necessary for compliance with a legal obligation to which the controller is subject,

6(1)(e) Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller,

and

9(2)(h) Processing is necessary for the purposes of the provision of health or social care or treatment.

In addition, with the Coivd-19 vaccination, we have an obligation to let your employer know that you have been vaccinated to support their obligation to safety in the workplace. The lawful basis for this processing is found at Articles:

6(1)(c) Processing is necessary for compliance with a legal obligation to which the controller is subject,

6(1)(e) Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller,

and

9(2)(b) processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment

9(2)(i) processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health

Across the East of England a variety of lead providers and existing local/national systems for booking/recording and sharing of the necessary information will be used to enable the ability to rapidly roll-out this vaccination programme to staff.

If you have any questions about the use of your data for these purposes please contact Sara Taylor, data protection officer on 01284 712781.