Independent Covid-19 Review Notice
Both the Office of the Chief Executive and the Independent Covid-19 Review Panel members are each registered as ‘Controllers’ under the Data Protection (Jersey) Law 2018 as we collect and process personal information about you. We process and hold your information in order to provide both the infrastructure and the delivery of the Independent Covid-19 Review. This notice explains how we use and share your information. Information may be collected on paper, by post, or online form, by telephone, email, or by a member of our staff.
Information we collect about you
We collect the following types of information about you:
- your name
- your contact details
- your interactions with the panel, including review submissions.
- your feedback and queries
- Any other information you may volunteer to us.
This independent review is focused on evaluating the policies, decisions and actions taken by the Government of Jersey and its partner organisations during the COVID-19 pandemic, in accordance with its terms of reference. It is not focused on:
- Individual complaints
- Individual cases of care
- Individual service delivery
Individuals wishing to submit evidence are requested not to include any health-related information or other special category data that relate to individual cases described above. Please do not share information concerning third parties.
The purpose for which the data is to be used.
We need to collect and hold information about you, in order to:
- allow you to contribute to the review.
- answer your queries
The Parties acknowledge that there is substantial public interest in processing of the Shared Personal Data including (but not limited to) in the area of public health in relation to protection against cross border threats to health and ensuring a high standard of quality and safety of health care or social care and is necessary to better enable the exercise of certain functions of the States and any administration of the States or any public authority
The Independent Covid-19 Review Panel will:
- Gather personal information to facilitate meetings with the panel
- Gather evidence/submissions to the panel.
We may disclose information to other parties, but only where it is necessary, either to comply with a legal obligation, or where permitted under other legislation.
At no time will your information be passed to organisations for marketing or sales purposes or for any commercial use without your prior express consent.
We sometimes need to share your data with certain third parties who provide service to us, so that they can provide those services. These third parties process your data on our behalf and we have strict contracts with them to ensure they process your data only on our instructions and with appropriate security in place
It is not our intention to transfer data your data outside the EEA and UK. The processors and infrastructure support may process some of your personal data outside.
How long we keep your data for?
We will not keep information about you for longer than is necessary. Following the conclusion of the review, all personal information included in records held by the panel will be redacted. This anonymised information will then be securely transferred to the Jersey Archive as a closed record. For more information about closed records, please see the Jersey Heritage website.
This means that after the review has concluded, neither the Independent Covid-19 Review Panel or the Government of Jersey will be in possession of or processing your data. However, during the lifetime of the review you may exercise your right to make the following requests.
Publication of your information
We will not publish your personal information, but may publish a summary of the themes identified in your responses to the panel, in line with our terms of reference,
Anonymous submissions will not be considered as part of the review.
You can ask us to stop processing your information.
You have the right to request that we stop processing your personal data in relation to any of our services. In order to do this we ask that you email firstname.lastname@example.org to make this request. In this case, we will delete your personal data from our records. However, this may mean that your evidence cannot be considered as part of the review. Where possible we will seek to comply with your request but we may be required to hold or process information to comply with a legal requirement.
You can request that the processing of your personal data is restricted.
You have the right to request that we restrict the processing of your personal information. In order to do this we ask that you email email@example.com to make this request. You can exercise this right in instances where you believe the information being processed is inaccurate, out of date, or there are no legitimate grounds for the processing. We will always seek to comply with your request but we may be required to continue to process your information in order to comply with a legal requirement.
You can withdraw your consent to the processing of your information.
In the few instances when you have given your consent to process your information, you have the right to withdraw your consent to the further processing of your personal data. In order to do this we ask that you email firstname.lastname@example.org to make this request and no further processing of your information will take place. However, this may mean that your evidence cannot be considered as part of the review. We will always seek to comply with your request but we may be required to hold or process your information in order to comply with a legal requirement.
You can ask us to correct or amend your information.
You have the right to challenge the accuracy of the information we hold about you and request that it is corrected where necessary In order to do this we ask that you email email@example.com to make this request. We will seek to ensure that corrections are made not only to the data that we hold but also any data held by other organisations/parties that process data on our behalf.
You can ask us for a copy of the information we hold about you.
You are legally entitled to request a list of, or a copy of any information that we hold about you. In order to do this we ask that you email firstname.lastname@example.org to make this request. However where our records are not held in a way that easily identifies you, we may not be able to provide you with a copy of your information, although we will do everything we can to comply with your request.
You can complain to us about the way your information is being used.
If you have an enquiry or concern regarding the processing of your personal data please contact:
- by email on email@example.com
Or alternatively send any complaints headed up “Covid 19 review panel” to:
Central Data Protection Unit
28-30 The Parade
Jersey JE2 3QQ
Telephone: +44 (0)1534 440514
If you believe that the Government of Jersey or the Panel has contravened the Data Protection Law and the contravention affects your data protection rights, you have the right to make a complaint at any time to the Jersey Office of the Information Commissioner (JOIC), (https://jerseyoic.org/). We would, however, appreciate the chance to deal with your concerns before you approach the JOIC, so please contact DPU@gov.je in the first instance.