UK Pandemic Programs Failed To Protect Citizens’ Health Data, Say Campaigners

Privacy campaigners Open Rights Group (ORG) have suggested that UK’s Information Commissioner’s Office (ICO) repeatedly failed to take action on clear breaches of data protection laws by the UK government. After analysing three Covid health programs: NHS Test and Trace, NHS Contract Tracing App and the NHS Datastore, they found that all failed to comply with GDPR’s requirement for Data Protection Impact Assessments. ORG is calling for government to scrap the DPDI Bill and for the ICO to ensure proper data governance in government.