UK contact tracing app breaches GDPR, will store personal user data for 20 years

We've extensively covered how ? coronavirus contact tracing apps pose a threat to privacy and civil liberties. We've also discussed how the UK's centralized approach, in particular, is not only more concerning than others, but that the NHS has allowed sensitive internal documents discussing its development to get leaked.

The leaked document, dated March 25th, discussed the collection of users' precise GPS location data, something the NHS had previously claimed they would not do.

An absolute shit-show all around, but it gets worse.

The NHS published a privacy notice on May 29 which mentions, among other things, that it reserves the right to retain personal data for up to 20 years.

…