https://techcrunch.com/2020/05/04/uks-coronavirus-tracing-app-strategy-faces-fresh-questions-over-transparency-and-interoperability/

The UK’s data protection watchdog confirmed today the government still hasn’t given it sight of a key legal document attached to the coronavirus contacts tracing app which is being developed by the NHSX, the digital transformation branch of the country’s National Health Service .

Under UK and EU law, a Data Protection Impact Assessment (DPIA) can be a legal requirement in instances where there are high rights risks related to the processing of people’s information.