Privacy policy reveals invasiveness of UK contact tracing

The UK's NHSx contact tracing initiative requires anyone who tests positive for COVID-19 to provide the full name, postcode/house number, phone number, and email of anyone they've been in contact with, and Public Health England will keep the data for 20 years. The privacy notice was quickly updated to not that those testing positive will also be asked for NHS number, sex, symptoms, and when symptoms started. Those gaining access to the data will include two outsourcing companies, Serco and SITEL, as well as Amazon Web Services as cloud provider.

https://twitter.com/mattburgess1/status/1266282755224031236
https://contact-tracing.phe.gov.uk/help/privacy-notice
Writer: Matt Burgess; UK government 
Publication: Twitter; UK government