Coronavirus Test and Protect guidance on collection of customer and visitor contact details

Support provided by Scottish Government

What does this involve?

As businesses in Scotland begin to reopen as part of the gradual easing of lockdown restrictions, the Scottish Government has issued guidance on how to collect customer and visitor contact details to assist with NHS Scotland’s Test and Protect coronavirus (COVID-19) contact tracing system.

This data should be gathered by businesses and other establishments in Scotland where the nature of the premises means there may be an increased risk of transmission of COVID-19 due to a higher degree of interaction between unknown individuals. This measure will form part of the national effort to suppress COVID-19, and support Scotland to return to a more normal way of life.

The guidance sets out key actions and information around the collection of customer and visitor data as restrictions relating to the COVID-19 pandemic are eased.

Topics include:

  • An introduction to how the Test and Trace system works
  • Which businesses and establishments should collect contact details
  • How to determine if your organisation needs to register with the Information Commissioner’s Office (ICO)
  • Collecting and handling data in a way that’s compliant with data protection laws
  • How to collect, store and dispose of data securely
  • How the data will be used
  • Useful tools and resources

Am I eligible?

Anyone can use this service.

What does this cost?

This is a free service.

Who is this for?

This guidance applies to any establishment or operator in sectors that provide an on-site service or work in other people’s homes to deliver a service. This includes, but is not limited to:

  • Hospitality, including restaurants, cafes, and pubs, as well as hotels and other accommodation providers
  • Tourism and leisure, including theme parks, museums and cinemas
  • Close contact services, including hairdressers, barbers, beauticians, tattooists, sports and massage therapists, dress fitters, tailors and fashion designers
  • Facilities provided by local authorities, such as libraries, leisure centres and registration offices
  • Cremation authorities, burial authorities, places of worship or funeral director service rooms offering funeral services
  • Places of worship which are reopening for congregational services and communal prayer or contemplation

It does not apply where services are taken off-site immediately - for example, a library operating a click-and-collect service, or a food outlet which only provides takeaways. If premises offer a mix of on-site and collection services, contact information only needs to be collected for customers who remain on-site.

How long does this take?

You can read the guidance at your own pace.

Important information

This guidance comes into effect from 15 July 2020. From this date, applicable premises should collect contact details from customers to support NHS Scotland's Test and Protect service.

Next steps

Visit the Scottish Government website for more information and to read the full guidance.

Support provided by Scottish Government

Help us improve

For example, something is incorrect, confusing or not working properly. Try to be as specific as possible. Don't include personal or financial information like your national insurance number or credit card details.