Generic filters

Local Test and Trace Service

The council has signed a contract with Public Health England for undertaking Local Covid-19 Contact Tracing. The legal basis for the council to use personal information for Local Contact Tracing, including contact details from council tax, library services and housing records, is provided by the GDPR ‘public task’ and ‘substantial public’ condition and is allowed for under the section 251 of the National Health Service Act 2006 and Regulation 3 of the associated Health Service (Control of Patient Information) Regulations 2002.

Access to information is restricted to specially designated council officers and will be handled in accordance with data protection principles. The council may be required to share information with the police to assist them with their duties with regard to Covid-19 restrictions and self-isolation.

NHS Test and Trace Support Payments

Access to a discretionary fund from government for Test and Trace support payments is available for eligible individuals. More information about the scheme can be found here.

If you apply, we will need to process your personal data to assess whether you are eligible to receive financial support, and if so, to provide a payment to you.  This Privacy Notice sets out what personal data we will use, how we will use it, and why we need to, when an applicant applies for this support.

Data Controller

Portsmouth City Council are the data controller for the purposes of Local Contact Tracing and for assessing eligibility, administering and making payments under the Test and Trace, Self Isolation and Parent/Guardian Support schemes.

New package to support self-isolation

If you have been told to self-isolate, either because you have tested positive for COVID-19 or you have been in contact with someone who has tested positive, you may be entitled to some financial support during your self-isolation period.

What are Self-Isolation Payments?

People who are eligible will receive:

A £500 one-off Test and Trace Support payment or provision from the discretionary fund to remain at home to help stop the spread of the virus.

Categories of personal data we collect and process

We collect and process the personal data that you provide to us when completing your application for a self-isolation support payment, which may include:

  • Full name;
  • Full residential address;
  • Email address;
  • Mobile telephone number;
  • Home telephone number;
  • Proxy applicant details (as above where you may nominate someone else to complete this application on your behalf);
  • Employer name and address;
  • NHS notification number (the unique reference you will be given by NHS Test and Trace Service to self-isolate);
  • Bank account details;
  • Your National Insurance Number;
  • Proof of self-employment e.g. recent business bank statement (within the last two months), most recent set of accounts or evidence of self-assessment

Test and Trace Support Payments for parents and guardians

If you are a parent or guardian caring for a child or young person who is self-isolating, your Test and Trace Support Payment application will be checked with your child or young person’s education or care setting.

This includes checking the following information provided by the parent or guardian as part of their application for a Test and Trace Support payment:

  • the child’s name, age and main address.
  • the child’s first day of self-isolation.
  • that the child didn’t continue to attend the education or care setting when they should have been self-isolating.
  • whether the communication from the education or care setting is genuine (if this has been submitted by the applicant).

Source and categories of personal data

We will obtain data from the NHS Test and Trace Service to confirm that you have either tested positive for COVID-19 or you have been in close contact with someone who has tested positive for COVID-19. We will also be able to verify as to whether you have been fully vaccinated against COVID-19. As this data is related to your health it is referred to as ‘special category data’.

You or your nominated representative will also provide us with additional personal data in relation to your application for a Test and Trace, Self-Isolation Payment or Support Payment for Parents or Guardians.

What we use your personal data for

We will carry out checks with the NHS Test and Trace Service and the Department for Work and Pensions (DWP), for verification purposes, Her Majesty’s Revenue and Customs (HMRC), for tax and National Insurance purposes, and potentially with your employer in validating your application.

Information relating to your application will also be sent to the DHSC to help understand public health implications, allow us to carry out anti-fraud checks and determine how well the scheme is performing.

We will not share this data with other organisations or individuals outside of Portsmouth City Council for any other purpose.

We will provide information to HMRC in relation to any payments we make because Self-Isolation Payments are subject to income tax. If you are self-employed, you will need to declare the payment on your self-assessment tax return.

Our lawful basis for processing the personal data

We must have a legal basis to process your personal data. Our lawful basis in the processing that we’ll undertake in assessing your eligibility for, and in making any self-isolation payment to you, is based on a legal obligation.

Where we use personal information to confirm that someone is eligible for a self-isolation payment, the sections of the law that apply are:

  • GDPR Article 6(1)(e) – processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
  • GDPR Article 9(2)(i) – processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of healthcare;
  • Data Protection Act 2018 Schedule 1 Part 1 (2) – health or social care purposes

Separately, we have special permission from the Secretary of State for Health and Social Care to use confidential patient information without people’s consent for the purposes of diagnosing, recognising trends, controlling and preventing, and monitoring and managing communicable diseases and other risks to public health.

This is known as a ‘section 251’ approval and includes, for example, using your test results if you test positive for COVID-19 to start the contact-tracing process.

The part of the law that applies here is section 251 of the National Health Service Act 2006 and Regulation 3 of the associated Health Service (Control of Patient Information) Regulations 2002.

You can find more information on this via the NHS Contact Tracing Privacy Notice here.

Data Processors and other recipients of your data

Portsmouth City Council will use the information you provide on this form to check whether you are eligible to receive a Test and Trace Support Payment and, if so, to provide a payment to you.

Your information and the information you provide in respect of a partner may be shared with:

  • The NHS Test and Trace Service
  • Department for Work and Pensions (DWP)
  • Department of Health and Social Care (DHSC)
  • Her Majesty’s Revenue and Customs (HMRC)
  • Housing Benefit Tribunal Service
  • Magistrates Court
  • Enforcement Agencies
  • The Police
  • TransUnion Bureau (credit reference agency)
  • Office for National Statistics
  • Other relevant departments and government agencies
  • Your employer for verification checks purposes;

Please see the NHS Test and Trace Support Payment Privacy Notice for details about how the council and other organisations use your information.

To validate your bank account details, we need to share relevant information you’ve given us with TransUnion. This will be used to ensure your Test and Trace Support Payment is paid to the correct bank account and to help prevent fraudulent use of the Test and Trace Support Payment scheme.

This is not a credit check and won’t impact your credit rating.

For more information on how TransUnion may use your data, please read the TransUnion privacy notice.

Portsmouth City Council uses an online form service supplied by Granicus.

Granicus does not use your personal information for anything other than providing the service to the Council and will not pass on your information for promotional purposes to any other person or organisation (third parties).

For more information about how Granicus uses personal information, view the Granicus govService Subscriber Privacy Policy.

Personal data disposal and retention

We will only keep your personal data for as long as it is needed for the purposes of the COVID-19 emergency, and for audit and payment purposes.

Your rights as a data subject

By law, you have a number of rights as a data subject and this does not take away or reduce these rights. Your rights under the EU General Data Protection Regulation (2016/679) and the UK Data Protection Act 2018 applies.

All information is processed in accordance with the Portsmouth City Council data protection policy Go to and search Data Protection.

These rights are:

  1. Your right to get copies of your information – you have the right to ask for a copy of any information about you that is used.
  2. Your right to get your information corrected – you have the right to ask for any information held about you that you think is inaccurate, to be corrected
  3. Your right to limit how your information is used – you have the right to ask for any of the information held about you to be restricted, for example, if you think inaccurate information is being used.
  4. Your right to object to your information being used – you can ask for any information held about you to not be used. However, this is not an absolute right, and we may need to continue using your information, and we will tell you if this is the case.
  5. Your right to get information deleted – this is not an absolute right, and we may need to continue to use your information, and we will tell you if this is the case.

If you are unhappy or wish to complain about how your personal data is used as part of this programme, you should contact Portsmouth City Council in the first instance,

If you are still not satisfied, you can complain to the Information Commissioners Office. Their website address is and their postal address is:

Information Commissioner’s Office
Wycliffe House
Water Lane


We use appropriate technical, organisational and administrative security measures to protect any information we hold in our records from loss, misuse, and unauthorised access, disclosure, alteration and destruction. We have written procedures and policies which are regularly audited, and the audits are reviewed at senior level.

Data Protection Officer

Any queries or concerns about how the Council processes and shares the information or requests for access to personal information should be directed to the Data Protection Officer, Portsmouth City Council at or telephone 02392 83688482

Automated decision making or profiling

No decision will be made about you solely on the basis of automated decision making (where a decision is taken about you using an electronic system without human involvement) which has a significant impact on you.

Changes to our policy

We keep our privacy notice under regular review, and we will make new versions available on our privacy notice page on our website.

This privacy notice was last updated on 25 March 2021.