News Article

NHS Test and Trace Update

4 March 2022

Thank you for supporting NHS Test and Trace through the COVID-19 pandemic by asking your customers, staff and visitors to check in using the NHS COVID-19 App or by providing their name and telephone number. Over 1.2 million venue alerts have been sent. This has helped to identify positive cases, keep people safe and slow the spread of the virus, enabling us to return to a more normal way of life.

Most of the remaining COVID-19 guidance in England has now ended. This means that the NHS programme is no longer asking you to:
- ask every customer or visitor aged 16 or over to ‘check in’ by scanning the NHS COVID-19 QR code poster using the NHS COVID-19 app, or by providing their name and telephone number.
- keep a record of all staff working on your premises, including their shift times and dates, and contact details.
- keep records of customers, visitors, and staff for 21 days to support NHS Test and Trace.

As people no longer need to check in, please remove any NHS COVID-19 QR code posters or any systems that you use to collect contact details (for this purpose) at your venue.

If you have records of customers, visitors, and staff that you have collected to support NHS Test and Trace, please delete this data. You must delete this data in a way that does not risk unintended access. For example, permanently deleting electronic files and shredding paper documents. It is important you do this to meet your General Data Protection Regulation (GDPR) obligations.

Records that you make and keep for other business purposes do not need deleting.

Once the venue alerts system is taken down, your data associated with your NHS COVID-19 QR code poster will be deleted.

The Venue Check-in NHS QR Code Generator website holds the details entered for your venue. This includes relevant contact details and information about who registered the venue. This data will be held for an initial six-month period prior to review, where not already deleted. This review period is in place to ensure that the UK Health Security Agency (UKHSA), and the Department of Health and Social Care (DHSC), can fulfil their public health obligations, ensuring records are available for accountability and organisational need.  At the end of this review period, any personal data will be deleted, or records anonymised.

If you have downloaded an NHS COVID-19 QR code poster, you will receive this information via the email address used to sign up to the Venue Check-in QR Code Generator website.