The UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

The ICO recognises the unprecedented challenges we are all facing during the Coronavirus (COVID-19) pandemic.

As lockdown restrictions start to ease and businesses begin to reopen, we know you might need to continue to share information quickly or adapt the way you work. Data protection will not stop you doing that.

It’s about being proportionate - if something feels excessive from the public’s point of view, then it probably is. Our six data protection steps for organisations sets out the key principles organisations need to consider around the use of personal information.

And the ICO is here to help – please see below for answers to the questions we’re being asked. If you need more help, call us on 0303 123 1113.

We have also produced specific advice for health and social care organisations during the coronavirus pandemic.

Regulatory approach

This section explains the ICO’s regulatory approach during the COVID-19 pandemic and recovery phase.


This section contains guidance for employers and organisations that are planning on asking people if they have experienced COVID-19 symptoms or are planning to introduce testing.


This section contains guidance for employers and organisations that are planning on using CCTV, thermal cameras or other surveillance methods as part of testing or ongoing monitoring of staff.

Individual rights

This section explains people’s rights in relation to their personal data and how you can comply.

Collecting customer and visitor details for contact tracing

This Section provides advice for organisations and small businesses that are asked by government to collect and retain customer and visitor information, for a limited time period, for the purposes of a COVID-19 contact tracing scheme.