Coronavirus Test and Protect guidance on collection of customer and visitor contact details

What does this involve?

As businesses in Scotland begin to reopen as part of the gradual easing of lockdown restrictions, the Scottish Government has issued guidance on how to collect customer and visitor contact details to assist with NHS Scotland’s Test and Protect coronavirus (COVID-19) contact tracing system.

This data should be gathered by businesses and other establishments in Scotland where the nature of the premises means there may be an increased risk of transmission of COVID-19 due to a higher degree of interaction between unknown individuals. This measure will form part of the national effort to suppress COVID-19, and support Scotland to return to a more normal way of life.

The guidance sets out key actions and information around the collection of customer and visitor data as restrictions relating to the COVID-19 pandemic are eased.

Topics include:

  • An introduction to how the Test and Trace system works
  • Which businesses and establishments should collect contact details
  • How to determine if your organisation needs to register with the Information Commissioner’s Office (ICO)
  • Collecting and handling data in a way that’s compliant with data protection laws
  • How to collect, store and dispose of data securely
  • How the data will be used
  • Useful tools and resources

Am I eligible?

Anyone can use this service.

What does this cost?

This is a free service.

Who is this for?

This guidance applies to any establishment or operator in sectors that provide an on-site service or work in other people’s homes to deliver a service. This includes, but is not limited to:

  • Hospitality, including restaurants, cafes, and pubs, as well as hotels and other accommodation providers
  • Tourism and leisure, including theme parks, museums and cinemas
  • Close contact services, including hairdressers, barbers, beauticians, tattooists, sports and massage therapists, dress fitters, tailors and fashion designers
  • Facilities provided by local authorities, such as libraries, leisure centres and registration offices
  • Cremation authorities, burial authorities, places of worship or funeral director service rooms offering funeral services
  • Places of worship which are reopening for congregational services and communal prayer or contemplation

It does not apply where services are taken off-site immediately - for example, a library operating a click-and-collect service, or a food outlet which only provides takeaways. If premises offer a mix of on-site and collection services, contact information only needs to be collected for customers who remain on-site.

How long does this take?

You can read the guidance at your own pace.

Important information

The Protect Scotland app from NHS Scotland’s Test and Protect is a free, mobile phone app designed to reduce the spread of coronavirus and avoid further lockdowns.

The app will alert you if you have been in close contact with another app user who tests positive for coronavirus. And if you test positive, it can help in determining contacts that you may have otherwise missed while keeping your information private and anonymous.

Next steps

Visit the Scottish Government website for more information and to read the full guidance.

Help us improve

For example, something is incorrect, confusing or not working properly. Try to be as specific as possible. Don't include personal or financial information like your national insurance number or credit card details.