Pubs and hospitality - dealing with data collected for Covid-19 tracing

In a podcast aimed at licencees and managers, Helena Wootton, Stewart Dresner and Tom Cooper discuss possible data protection pitfalls of collecting data from customers and make some practical suggestions.Useful links: UK Government guidance - Keeping workers and customers safe during COVID-19 in restaurants, pubs, bars and takeaway serviceshttps://assets.publishing.service.gov.uk/media/5eb96e8e86650c278b077616/Keeping-workers-and-customers-safe-during-covid-19-restaurants-pubs-bars-takeaways-230620.pdfBig Hospitality -  Coronavirus track and trace: 7 steps to complying with data protection law https://www.bighospitality.co.uk/Article/2020/06/24/Coronavirus-track-and-trace-7-steps-to-complying-with-data-protection-law-GDPR-hospitality-restaurants-barsNote from Stewart Dresner, Privacy Laws & Business:"I stated in the podcast that retaining personal data for its purpose, in this case for Covid-19 tracing, (the purpose limitation principle) is a longstanding principle going back to the UK’s Data Protection Act 1984. I wrote an article in The Economist  in 1987 reflecting the importance of this principle by referring to the first use of a search warrant by the Data Protection Registrar [the regulator] to investigate a part-time policeman who was suspected of using the Police National Computer to check up on the boyfriend of his daughter. A similar case involving a policeman, who worked part-time as a debt collector, led ultimately to a decision in the UK’s highest court referenced as R. v. Brown [1996] 1 AC543 on interpretation of the Data Protection Act 1984 Section 1 (7)" http://www.legislation.gov.uk/ukpga/1984/35/section/1/enacted