Test and Protect Information for Businesses

As part of the measures designed to minimise further spread of COVID-19, hospitality, leisure and close contact businesses such as hairdressers are being asked to collect customer contact details.

People pulling together

This is essential as it will enable the NHS Test and Protect teams to quickly contact those who have been in close proximity to someone who has tested positive for COVID-19.

In summary the name, mobile phone number and date and time the customer was on the premises should be collected.  The customer must be informed as to what their details will be used for and the information must be destroyed after 21 days.

If the information is stored electronically businesses should be registered with the Information Commissioner's Office. There is no need to register with the Information Commissioner's Office if paper records are kept, although these should be kept securely. Please see the guidance for further details:

The Scottish Government have provided a privacy notice, as well as posters for businesses to display to let customers know they are participating in Test and Protect.