Ceredigion County Council, as a responsible employer, has an overarching duty to protect the health and wellbeing of its employees. We hold a duty of care to each and every employee of the Council, as well as a responsibility to individuals who may come into contact with us as a result of our work, including members of the public with whom our employees may have had contact.
In light of the current outbreak of Covid-19 local government employees have been classed by the government as ‘Key Workers’, and as such testing pathways are available to any employee who has been diagnosed with Covid-19.
Where a positive diagnosis is received we will provide relevant public health advice to you, as well as undertake basic contact tracing to attempt to ascertain if other individuals may have been exposed to the virus so that we can also provide relevant public health advice to them.
The information we collect about you will be used for the purpose(s) of:
- Ensuring your, or a member of your household’s eligibility for a test to diagnose Covid-19
- To enable the Authority to trace individuals with whom you may have had contact
- To better understand the prevalence of Covid-19 within our workforce
The lawful basis for the processing of your information is: (…)
- To comply with a legal obligation
- To perform a task in the public interest or in the exercise of official authority
The lawful basis for the processing of special category data is
- GDPR Article 9 2 (b) Employment
- Article 9 2 (g) Reasons of substantial public interest
- Article 9 2 (h) Health
- Article 9 2 (i) Public health
The relevant substantial public interest condition is DPA 2018 Schedule 1 paragraph 6; statutory and government purposes (legislation set out below)
The applicable legislation is:
- Health and Safety at Work Act 1974
- Health Protection Local Authority Powers Regulations (Wales) 2010
- Health Protection (Notification) Regulations Wales 2010
- Control of Patient Information Regulation 3
What if you do not provide personal data?
If you do not give us the information we need when we ask for it, this may result in
- Our being unable to arrange for you or a member of your household to receive a test
- Our being unable to meet our duty of care to our employees and individuals who have come into contact with us as an Authority in the course of our work as an organisation.
What type of information do we use?
We collect the following types of personal data about you to deliver this service…
We may collect the following types of personal data about you to deliver this service, depending on your circumstances:
- Name;
- Telephone number;
- Employment details
- Medical information (symptoms and test result)
Do we use information received from other sources?
To provide this service, we collect information directly from you but also receive information from the following sources:
- Ceredigion County Council Ceri absence monitoring system
- Ceredigion County Council/Public Health Wales Tarian database
The following types of personal data are obtained:
- Name;
- Telephone number;
- Employment details
- Medical information
Transferring your information abroad
Your information will not be transferred outside the United Kingdom.
Who your information may be shared with (internally and externally)?
We may share your information with the following recipients depending on your circumstances:
Internally:
Ceredigion County Council Public Protection team [for contact tracing purposes]
Externally:
Hywel Dda University Health Board [administration of testing]
There are also other specific situations where we may be required to disclose information about you, such as:
- Where the Council is required to provide the information by law:
- Where disclosing the information is required to prevent or detect a crime
- Where disclosure is in the vital interests of the person concerned
