Question to the Department for Business, Energy and Industrial Strategy:

To ask the Secretary of State for Business, Energy and Industrial Strategy, what steps he is taking to ensure that data collected by businesses in the hospitality industry to support test and trace is not being used for marketing purposes.

Government advice from the Department for Health and Social Care is clear. The data that is being asked to collect is personal data and must be handled in accordance with General Data Protection Regulation (GDPR) to protect the privacy of your staff, customers and visitors.

Personal data that is collected for NHS Test and Trace, which organisations would not collect in their usual course of business, must be used only to share with NHS Test and Trace. It must not be used for other purposes, including marketing, profiling, analysis or other purposes unrelated to contact tracing, or they will be in breach of GDPR.