DATA PROTECTION AND CONTACT TRACING

One of the requirements introduced by HM Government of Gibraltar during the COVID-19 pandemic is that certain establishments have had to implement new measures which include the processing of personal data of customers and visitors. This is part of the contact tracing scheme introduced to fight the pandemic. The Data Protection Commissioner is reminding these establishments that all personal data collected must be processed in compliance with the Government’s regulations and data protection legislation, which is that personal data must only be used for the purposes of contact tracing, collected and stored securely, and destroyed after 10 days.

In this document, the Data Protection Commissioner provides information which all establishments which are subject to the regulations should observe.