Medical Data Privacy
Please read carefully below what you are being asked to consent to. If you agree to the below and the information on the Consent for testing page, your child will be able to receive Covid-19 testing at school.
Please submit your consent to your Academy via the method requested by the school (this will be by using the MyChildAtSchoolApp, by e-signature, or by email).
Ownership of the Personal Data
To enable the Covid-19 testing to be completed at an Oasis academy, we need to process personal data for staff and pupils taking part, including sharing of personal data where we have a legal obligation. Each Oasis academy is the Data Controller for the data required for processing the tests and undertaking any actions which are needed by the school to ensure we meet our public health and safeguarding legal obligations. All data is processed under [Section 175 of the Education Act 2002 for maintained schools or under Section 3 of the Non-Maintained Schools Regulations 1999 for non-maintained schools]. Data Controllership is then passed to the Department for Health and Social Care (DHSC) at the point that we transfer data to them.
Personal Data involved in the process
We use the following information to help us manage and process the tests
- Name
- Date of birth (and year group)
- Unique barcode assigned to each individual test and which will become the primary reference number for the tests
- Test result
- Parent/guardians contact details
We will only use information that is collected directly from you specifically for the purpose of the tests, even if you have previously provided us with this information.
The information will only be stored securely on local spreadsheets in school until it is securely shared with DHSC.
Processing of Personal Data Relating to Positive test results
The member of staff, pupil or parent (depending on contact details provided) will be information of the result by the school and advised how to book a confirmatory test.
The school will use this information to enact their own COVID isolation processes without telling anyone who it is that has received the positive test.
The information will be transferred to DHSC, who will share with NHS. PHE and the Local Government who will use the information for wider test and trace activities as well as statistical and research purposes.
This information is processed and shared under obligations set out in Public Health legislation under Regulations 3(1) and (4) of the Health Service (Control of Patient Information) Regulations 2002 (COPI) which allows the sharing of data for COVID related purposes.
This information will be kept by the school for up to 14 days and by the NHS for 8 years.
Processing of Personal Data Relating to Negative test results
The school will record a negative result and the information will be transferred to DHSC, NHS. PHE and the Local Government who will use the information for statistical and research purposes.
This information is processed and shared under obligations set out in Public Health legislation under Regulations 3(1) and (4) of the Health Service (Control of Patient Information) Regulations 2002 (COPI) which allows the sharing of data for COVID related purposes.
This information will be kept by the school for up to 14 days and by the NHS for 8 years.
Data Sharing Partners
The personal data associated with test results will be shared with DHSC, NHS, PHE and local government to ensure they take the necessary actions they need to complete under their legal obligations.
Your Rights
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact your child’s Oasis academy by email (listed on the Academy website’s contact us page) if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, you can make a contact Oasis Community Learning’s Data Protection Officer, sarah.otto@oasisuk.org.
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1111