Skip to main content
Beauchamps Close
Back

Beauchamps
  • About us
    • About Beauchamps
    • Client service
    • Core values
    • Corporate social responsibility
    • History
    • Knowledge management
    • Partnerships
  • Our People
  • Our services

    Practice Areas

    • Banking & Finance
    • Commercial Property
    • Company Secretarial
    • Construction
    • Corporate & Commercial
    • Corporate Governance & Company Compliance
    • Crisis Management
    • Data Protection & Freedom of Information
    • Employment & Benefits
    • Energy & Natural Resources
    • EU, Competition & Procurement
    • Insolvency & Corporate Restructuring
    • Insurance & Professional Indemnity
    • Inward Investment
    • Litigation & Dispute Resolution
    • Medical Negligence and Personal Injury*
    • Mergers & Acquisitions
    • Planning & Environmental

    Sectors

    • Brexit
    • Charities & Not For Profit
    • Energy & Natural Resources
    • Family Business
    • Financial Services
    • Food & Agri
    • Healthcare
    • Housing
    • Real Estate
    • Retail
    • Sport
    • Technology & Communications
    View All Services
  • What's new
    • Beauchamps - proud sponsor of and official legal adviser to Leinster Rugby
    • Brexit Update
    • Doing business in Ireland
    • General Data Protection Regulation
    • The Companies Act 2014
    • Covid-19 Updates
  • Join us
    • Why join Beauchamps?
    • Current opportunities
    • Legal professionals
    • Business support
    • Intern & trainee programmes
Contact Search
Search Menu
Beauchamps
Search Menu
What's new

DPC and Guidelines on COVID-19 contact tracing

05 Oct 2020

Breadcrumb

  1. Home
  2. What's new
  3. Publication

Share

The Irish Data Protection Commission (DPC) has published guidelines for businesses who must collect contact details from customers, to assist them in navigating their data protection obligations to protect the privacy rights of customers while also following the Government's advice.

Main points

  • Minimise the amount of data collected – Businesses should only collect data that it needs to provide for contact tracing or compliance purposes, eg name, contact number, time and date of attendance. In the case of licensed premises, records of the sale of meals to customers must be recorded for compliance purposes. However, the DPC points out that this does not require businesses to ask customers to verify their identity.
  • Be transparent about why the data is being collected – Businesses and their staff should be able to explain clearly to customers the purpose for collecting the personal data. If an online booking system is used, information could be provided at this point to advise customers that their details will be retained for contact tracing.
  • Store the data securely - If the data is stored electronically (although this is not necessary), businesses should ensure that the system is secure. Contact tracing details should not be kept in such a way that they are visible to other customers and businesses must ensure that the information is kept securely and confidentially.
  • Limit the data to the purpose for which it was collected – Businesses cannot use the data for other purposes such as direct marketing. The data should also not be disclosed to any third parties except public health authorities who request it for contact tracing purposes if necessary.
  • Delete data when no longer required for contact tracing or compliance purposes - The current public health requirement is that contact details should be retained for one month. Accordingly, businesses should schedule regular deletion and destruction and should ensure that the data is disposed of safely including shredding any manually held data. Business should also remember to delete the data from recycle bins as well as from any cloud based back up files (where stored electronically).

The obligation to comply with data protection law is not waived during the COVID-19 pandemic. Accordingly, businesses should, without delay, review their contact tracing procedures to ensure that they are data protection compliant.

For more information, please contact Maureen Daly or any member of the Data Protection team.

About the author

Maureen Daly

Partner

About Maureen

Maureen is partner and head of our technology & intellectual property team, and our data protection & freedom of information team. Maureen works with many of the world’s biggest domestic and global brands particularly in the food & beverage, technology & communications, pharmaceutical and retail sectors, SMEs, start ups, not-for-profit organisations and public sector bodies.

Beauchamps

Related Services

Practice Areas

    Data Protection & Freedom of Information
Beauchamps

Our Location

Riverside Two

Sir John Rogerson's Quay

Dublin 2, D02 KV60

Ireland, DX No. 63

General Enquiries

T: +353 (0) 1 418 0600

F: + 353 (0) 1 418 0699

E: info@beauchamps.ie

  • Cookie Policy
  • Disclaimer
  • Accessibility
  • Sitemap
  • Contact
  • Privacy