COVID-19 Testing and Tracing: Data Collection and Privacy
COVID-19 Testing and Tracing
Data Collection and Privacy
Home / About HUIT / Policies & Guidelines / COVID-19 Testing and Tracing Data Collection and Privacy
Overview
To support University efforts to protect the health and safety of the community during the COVID-19 pandemic, testing and tracing required that data be collected from faculty, students, researchers, and staff returning to campus.
All data collected will be used only for the specific purpose of ensuring compliance with return to campus protocols and managing the health of the Harvard community. Any further use of data will be subject to future authorizations that conform to University policies and protocols on access to electronic information.
The University is committed to transparency in its COVID-19 testing and tracing practices. This page is designed to offer a summary of the data that will be collected, how data will be used, and what the University is doing to protect the privacy of community members.
Frequently asked questions
What data are we collecting, and for what purpose?
The University’s testing and tracing practices require the collection of a variety of different datasets, including, but not limited to, location data, COVID-19 testing data, and training compliance data.
All data collected will be used only for the specific purpose of ensuring compliance with return to campus protocols and managing the health of the Harvard community. Any further use of data will be subject to future authorizations that conform to University policies and protocols on access to electronic information.
How is the data being collected?
Data is being collected through several systems and processes utilized in testing and tracing practices.
View full chart for more details
Who can access the data?
Any medical data, including personally identifiable test results, will be accessible only to Harvard University Health Services (HUHS) and their explicitly authorized designees, in accordance with privacy and compliance policies. Other non-medical data is accessible for the express purpose of managing return to campus processes by medical and administrative leaders with direct responsibility for these tasks.
How is the data protected, and how long is it retained?
Data will be stored by Harvard University Information Technology (HUIT) on systems that comply with the requirements for high-risk (Level 4) data under the Harvard University Information Policy. Disclosures to HUHS will be made by secure file transfer and will be stored securely at HUHS, also in accordance with Level 4 data requirements.