Guidance on COVID-19

The Gibraltar Regulatory Authority (the “GRA”), as the Information Commissioner (the “Commissioner”) has today published a guidance note which provides information and guidance on the use of contact tracing applications and location data in the fight against COVID-19.

There are rapid developments in the use of technology to support the fight against COVID-19, in particular technology to 1) trace contact amongst the population, and 2) map the spread of the virus. As with any emerging technology, it is important to recognise the data protection and privacy risks that may arise as a result.

Applications should adopt robust security (including the use of encryption, and covering each stage of the data processing), data minimisation, transparency and user control, and any supporting technology, including centralised processing to support contact tracing, should follow the same principles.

This guidance note is available on the data protection section of the GRA’s website –

For further information, please contact the Commissioner’s office on +350 200 74636 or email: