This statement covers the intended processing of data supplied by people acting in a volunteer capacity during the COVID-19 pandemic and mutual aid group (as named above) that developed out of a need for centralised grassroots support, as well as those requiring assistance who contact the group.
The primary data collected and processed by the group is:
• Location data; and
• Online identifier.
In some circumstances, other data classed as special category data (primarily data concerning health) has been disclosed to group members.
Group members (both those individuals requesting help and those able to provide it) consent to the processing of their data in line with the aims and objectives of the group, in line with the General Data Protection Regulation (hereafter, GDPR), Article 6 (1) (a) (consent). Although the group prioritises gaining explicit consent for all data processing, data may also be processed under Article 6 (1) (d) of the GDPR, as processing data will allow for the group to fulfil the ‘vital interest’ of the general public during a public health crisis. Special category data will be processed under Article 9 (2) (g) (‘Reasons of Substantial Public Interest’) of the GDPR.
All data processing will be purpose-limited and only gained and processed during the duration of the crisis. As the duration of the crisis is unknown at present, this statement will be regularly reviewed and updated to ensure that it remains fit for purpose in a fast-moving and challenging situation.
Further details on this statement and data usage can be sought through emailing firstname.lastname@example.org. Group members are welcome to remove their personal details from the group’s documentation at any time.
Date of publication: 18 March 2020
Date of revision: 23 March 2020