27th October 2020, 18:40
The Data Protection Commissioner is reminding establishments that all personal data collected, as part of contact tracing measures, must be processed in compliance with the Government’s regulations and data protection legislation. Personal data must only be used for the purposes of contact tracing, collected and stored securely, and destroyed after 10 days.
Christine Vasquez asked the GRA's Assistant Information Commissioner, Bradley Tosso, who the advice was aimed at.