Test and Protect
Recording customer details
Close contact service providers should collect individual customer contact details in a safe and secure manner, which is compliant with data protection legislation, in line with existing guidance.
This will assist NHS Scotland's Test and Protect service to identify and contact individuals who may have been exposed to the virus, and request them to take appropriate steps to prevent the potential onward spread of the virus. The data will also be helpful to the NHS and key local partners to manage and contain location-specific outbreaks.
We strongly urge all premises and providers with the means to sign up and use the free Test and Protect ‘Check-in Scotland’ digital service. All guidance, a user toolkit and to register to generate your unique QR poster can be found at: Check-in Scotland - mygov.scot
Use of the Protect Scotland app
Protect Scotland is not a requirement – however it is important that we all download and use the app to help stop the spread of coronavirus. We know the more of us that do, the more effective it will be. We encourage all businesses, staff, practitioners, and their customers to download the Protect Scotland app.
How long you need to keep client/customer details on file for Test and Protect/contact tracing purposes
Client/customer details should be retained for 21 days, in line with guidance on the collection of customer contact details. Where details are to be retained electronically a business needs to be registered with the Information Commissioner’s Office. The ICO has produced specific guidance on this for businesses.
What customer details to keep
As a minimum you should be retaining the clients/customer’s name and contact number or email address along with the name of the individual who provided treatment.
Where possible, it is recommended that you note the room/location or chair that the client/customer occupied during the treatment. The more specific information that you can record about a treatment, the greater the benefit in the event that Test and Protect need to trace individuals. This could also protect the continuity of your business/third sector organisations/practitioners by limiting the number of staff/people having to self-isolate.