Skip to content
Home > Business Hub > Back to Business: Data Collection

Back to Business: Data Collection

Businesses and organisations are being asked to collect details and maintain records of staff, customers and visitors for businesses that are opening from 4th July: Maintaining records of staff, customers and visitors to support NHS Test and Trace

The requirement to collect this data applies to: 

  • Hospitality businesses including pubs, bars & restaurants (does not apply to those operating a takeaway/delivery only service)
  • Tourism and leisure businesses including hotels, museums, cinemas, zoos and theme parks
  • Close contact services, including hairdressers, barbershops and tailors
  • Facilities provided by local authorities including town halls and civic centres for events, community centres, libraries and children’s centres
  • Places of worship, including use for events and other community activities 

The guidance applies to any establishment that provides an onsite service and to any events that take place on its premises. It does not apply where services can be taken offsite immediately, e.g a food and drink outlet which only provides takeaways. If a business offers a mixture of a sit-in and takeaway service, contact information only needs to be collected for customers who are dining in. It does not apply to drop-off deliveries. 

The data that needs to be collected is: 

Staff

  • The names of staff who work at the premises
  • A contact phone number for each member of staff
  • The dates and times that staff are at work 

Customers and visitors

  • The name of the customer or visitor. If there is more than one person, the name of the ‘lead member’ of the group can be recorded, along with the number of people in the group
  • A phone number for each customer/visitor, or for the lead member of a group
  • Date of visit and arrival, and where possible, departure time 

If a customer interacts with only one member of staff, the name of the assigned staff member should be recorded alongside the name of the customer (or lead member of a group). The data needs to be kept for 21 days. 

Please see below a copy of the guidance, FAQ, and a powerpoint toolkit for businesses which includes messaging to use with consumers and a template privacy notice for organisations to personalise and use: 

The Information Commissioner's Office has published information on the topic:

Further assets including how-to videos and social media content will be uploaded to a Google Drive here when they become available: 

Supporting BEIS workplace guidance:

 

. Keep Me Posted.