ZOE COVID symptom Study

[fls]

Hi

Our Head (we are a secondary school) is considering to sign the school up to ZOE School Communities programme - some basic non personal info is shared with the study, the link is sent to parents, and then the parents download the app and create their child (11-18 yo) profile, share symptoms if any - anonymous info is fed back to school, parents are able to see how many pupils are unwell. The school will be a data controller of anonymised health data. Anything we should be aware of (any data protection implications? I dread a DPIA). Thank you

[ICTDirect_Dave]

You can find their privacy notice here: https://covid.joinzoe.com/privacy That should tell you anthing you need to know.

 

It's a worthy cause. I've been using it personally since things got bad in March. Their aims to get data on school infections to better understand the impact is a good idea.

[JMBDataP]

I have no knowledge of the ZOE app so cannot offer an informed view on it. However based on your description of its functionality, it would appear that there is no sharing of personal data between school and ZOE. (Truly) anonymised data is not defined as personal data and therefore processing such data has no compliance implications from a data protection perspective. Based on your outline, the school will not be acting as a data controller in this situation as only ZOE will be processing personal data. The only advice I would give is that if a school is recommending an APP for parents to use (particularly which this may lead to the parents sharing personal data with the APP) then the school would need to have a high degree of confidence that the APP is acting in a manner that is ethical and safe.