Premises and venues across England like pubs, restaurants, hairdressers and cinemas must have a system in place by law to record contact details of their customers, visitors and staff in the latest move to break the chains of transmission of coronavirus.
These businesses and organisations had been advised to collect and share data, with many effectively doing so, but following the recent move to ban social gatherings of more than 6 people, the data collection programme will now be formally mandated by the government from 18 September.
Further guidance and, where necessary, regulations will be set out by the government specifying the settings which will be included, but the scope will cover the hospitality industry, such as pubs, bars, restaurants and cafes, as well as close contact services and other tourism and leisure venues.
Venues could be fined if they fail to ensure their premises remain COVID-secure, such as failing to take specified steps to collect contact information or taking bookings for groups of more than 6. Further details will be set out shortly.
The new rules mean organisations in scope will be legally required to request the contact details of every customer and visitor on their premises.
Venues must keep a record of all staff working on the premises on a given day and their contact details.
These will be stored for 21 days and shared with NHS Test and Trace, if requested.
This will assist NHS Test and Trace to effectively contact everyone who may have been exposed to the virus during an outbreak in these settings and to provide the appropriate public health advice. This will help to stop the onward spread of the virus.
The contact details include:
- contact number
- date of visit
- arrival time
- departure time, if possible
All collected data must comply with GDPR and will not be kept for longer than necessary.
Data collection should be as straightforward as possible for organisations. Each organisation will have the freedom to collect the data in a way that best suits them, either using an existing system or finding a new solution. This method will vary from sector to sector, and we will continue to engage with organisations to consider what additional support or guidance may be needed.
Contact details will only be shared with NHS Test and Trace if it is requested. This will usually be because the venue has been identified as the location of a potential local outbreak of COVID-19. If this is the case, the NHS Test and Trace service will work closely with any affected establishments to take appropriate action.
Businesses should continue to follow the government’s comprehensive workplace guidance with practical steps employers should take to make workplaces COVID-secure and ensure employees feel safe in their place of work.