Where you have customers visiting your premises, you should be aware of the Test and Protect privacy notice. You can refer customers to this in advance and/or have it available at your premises.

The Scottish Government has comprehensive Test and Protect guidance and that should answer any questions you might have. There's also a downloadable poster which can be displayed at premises.

Test and Protect poster

There are a few key points you should be aware of:

  • Be transparent with customers as to why you are collecting information and how it will be used.
  • Don't collect any more information than is strictly necessary.
  • Keep information secure.
  • Make sure you delete/destroy the information securely after 21 days.

There is no legal requirement that customers provide their data for Test and Protect purposes. However, you should encourage them to do so.

If you have any questions on the need to collect data, please contact the Data Protection Officer:

Data Protection Officer