Police Service of Northern Ireland - Addendum to Privacy Policy - COVID-19

ADDENDUM to Police Officer Recruitment Privacy Policy, in light of COVID-19-specific measures applied at Deloitte MCS Ltd. Assessment Centres.

This addendum should be read in conjunction with the www.joinpsni.co.uk / Deloitte MCS Limited PRIVACY STATEMENT - Police Officer Recruitment

As a result of COVID-19, Deloitte MCS Ltd. is required to apply additional measures at Assessment Centre to aid public health protection measures. Because of these measures Deloitte MCS Ltd. may be required to collect / process personal data over and above that which is standard at Assessment Centre. This is done so in order to ensure the safety and wellbeing of Assessment Centre attendees. As per our standard Privacy Policy, we will handle data in a sensitive manner and all data protection measures set out in our standard Police Officer Recruitment Privacy Policy will apply.

Given the nature of COVID-19 matters, the data collected may be considered 'health data', which is considered / special category personal data.

What personal data do we process and why?

We collect / process the following personal data for the purposes of this Addendum:

  • COVID Status - Information relating to your COVID Status, including via the HSC COVIDCert Check NI 'Verifier app'. Personal data relating to your COVID Vaccination Status / health status is not retained by Deloitte MCS Ltd..Deloitte MCS Ltd. simply checks your immediate eligibility to attend the venue and logs if you are eligible to attend. If you have been asked to leave the venue, because you were unable to show evidence of your COVID status at the time of your appointment, a note will be taken in case of the need to follow-up with you in order to facilitate an alternative appointment.
  • Contact Tracing - Your name, contact details, date, time and location of your presence in the Assessment Centre venue may be collected / proposed in order to facilitate the Public Health Agency (PHA) / PSNI Contact Tracing Service.  

What are our legal grounds to collect and process your personal data?

We rely on the following legal basis to collect and process your personal data:

  • Contractual: the processing is required in order to fulfil Deloitte's agreement with its venue supplier around applying COVID-safety measures at the assessment facility.
  • Legal obligation: the processing is necessary to comply with the law.
  • Public task: the processing is necessary to perform a task in the public interest, and the task has a clear basis in law.

Purpose for processing personal data:

The personal data collected about you will be used for the following purposes:

  • To verify your COVID Status. The data is used for the sole purpose of verifying your entitlement to attend the Assessment Centre venue in line with the COVID regulations laid down by Northern Ireland executive, with the aim of minimising the risk of the transmission of Coronavirus.
  • To maintain appropriate records to allow contact tracing (in case it becomes necessary e.g., someone reports a positive COVID test result following attendance at the Assessment Centre). 

Who are we sharing your personal data with?

Your data may be shared with applicable public authorities including the Health and Social Care NI (HSC), PHA or other health authorities, if we have a legal obligation to do so.

In particular, your data may be shared with PSNI / or (if required) the internal PSNI Contact Tracing Service.

We recommend that you consider the HSC COVIDCert Check NI 'Verifier App' Privacy Policy HSC COVIDCert so that you have an understanding of the workings of the HSC COVIDCert Check NI App that may, where applicable, be used to check your COVID Status.

If contact tracing is to apply, you are advised to acquire the internal PSNI Contact Tracing Service's Privacy Policy for your own records.

Deloitte MCS Ltd. is not responsible for the content or privacy practices of external organisations.

How long do we keep your data for?

We will endeavour to record your personal data, especially any health data, only for the time strictly necessary for the purposes set out in this privacy notice.

We will retain data only for as long as is required for lawful purpose(s). Retention / disposal of this data will be in line with our Retention and Disposal Schedules agreed with Police Service of Northern Ireland.

How do we protect your data?

Please consider our standard Privacy Policy for full details. The information you share with us under the scope of this addendum will be secured by standard technical and organisational measures and only staff required to see this information will be able to access it.