This note examines the published data protection impact assessment (DPIA) released by NHSX in relation to their contact tracing/proximity tracing app. It highlights a range of significant issues which leave the app falling short of data protection legislation. It does this in order so that these issues can be remedied before the next DPIA is published.

Download “Analysis of the NHSX Contact Tracing App ‘Isle of Wight’ Data Protection Impact Assessment“.