Thanks, Sleipnir.
That article says that some data from the app will be kept for 20 years, but not that such data includes location.
According to the article, the data will be kept by Public Health England.
www.theguardian.com/world/2020/may/28/nhs-will-keep-personal-data-of-people-with-coronavirus-for-20-years--uk-test-and-trace-programme
This information will be held securely by Public Health England and only used for purposes that help protect the public’s health from Covid-19.”
The privacy notice says: “The information needs to be kept for this long as may [sic] be needed to help control the spread of coronavirus, both currently and possibly in the future.
“It is held on PHE’s secure cloud environment, which is kept up to date to protect it from viruses and hacking. It can only be seen by those who have a specific and legitimate role in the response and who are working on the NHS Test and Trace. All these staff have been trained to protect people’s confidentiality.”
The devil is in the details. If the data includes only the same sorts of data my GP would have for a notifiable disease (contact info, DoB, medical condition, names of contacts), and is not used for any purpose other than working on Covid, then I might be OK about it.
Currently it's difficult for me to trust that this is what will happen.
Dominic Cummings is a big part of my lack of trust, because he has demonstrated an egregious attitude to our personal data and to data protection rules for years. He's not the only offender, of course, and getting rid of him wouldn't get rid of the problem. However he does have a long track record, andis currently in the heart of government and has been making grabs for our data since he got there.