NHS COVID Pass: Terms of Use

By using this Service, you agree to these Terms.

  1. Introduction
    1. Welcome to the terms of use (“Terms”) for the NHS COVID Pass (“Service”), which is available through the NHS App and https://covid-status.service.nhsx.nhs.uk/ from a web browser. The Service is available to residents of England, as well as the Isle of Man. The web browser version of the Service is also available to residents of Wales.
    2. The Department of Health and Social Care (‘DHSC’, ‘we’, ‘our’) has overall responsibility for the Service, which has been developed by, and will be operated by, NHSX (a joint working arrangement between DHSC and NHS England). For the purposes of clause 7 ‘we’ is deemed to include NHS Digital with respect to liability for NHS Digital’s role as the certifying authority.
    3. 1.3. NHS Digital is the certifying authority, which means it certifies that it has provided the information about (i) your vaccination history to the Service, on behalf of NHS England, for the vaccination database it operates (or in Wales, on behalf of the Welsh Government for the vaccination database operated by the Welsh Health Board, or in the Isle of Man on behalf of Manx Care for the vaccination database it operates) and (ii) about your testing data to the Service on behalf of Test and Trace, for the test result database it operates on behalf of DHSC (the Approved Source Systems). This contains (i) vaccination information supplied from the COVID-19 vaccine point of care systems approved by NHS England, who is the controller for and operates the COVID-19 Vaccination Programme in England (or in Wales, by Public Health Wales, who is the data controller for, and operates, the COVID-19 Vaccination Programme in Wales, or in Isle of Man, by Manx Care, who is the data controller for the vaccination programme in the Isle of Man) and (ii) testing information supplied from Test and Trace, for which DHSC are the data controller.
    4. These Terms apply to the Service only. There are separate terms of use that apply to: (i) the NHS App; (ii) NHS login; and (iii) the non-digital alternative to NHS Covid Pass, the ‘Get your coronavirus (COVID-19) vaccination status letter service’. For the purposes of the NHS login, the Service is a “Connected Service”, for the purposes of the NHS App the Service is a “Platform Service”.
  2. Purpose of the Service
    1. The purpose of the Service is to allow you to produce a digital NHS ‘COVID Pass’, which includes a 2D barcode. This allows you to demonstrate:
      1. your COVID-19 vaccination history for the purposes of international travel, as some countries may require you to provide them with evidence that you have been vaccinated before you are allowed to enter their country; or
      2. your COVID-19 status (which means either (i) your COVID-19 vaccination history; (ii) your natural immunity; or (iii) a recent negative test for COVID-19) for the purposes of Events Research Programme trials (see here), as well as other domestic uses which the Government may approve from time to time.
    2. The Service is not intended to be used by employers for the purpose of checking the COVID-19 status of their employees, or for any other purpose not approved in Government guidance.
    3. The Service is provided by DHSC free of charge, and it is expressly prohibited to attempt to sell or license use of the Service to any person, or to include the Service as part of a paid-for service or product.
  3. How to use the Service
    1. To use the Service, you must either i) first download the NHS App, which you can do here: https://www.nhs.uk/nhs-services/online-services/nhs-app/or ii) you can visit https://covid-status.service.nhsx.nhs.uk/ from a web browser.
    2. If it is your first time using the Service then you will need to set up NHS login credentials and prove who you are. In order to use the Service for international travel, you will need to complete the highest level of identity verification. This involves an online or offline identity verification process where physical comparison between you and a photographic form of identity has occurred. For domestic uses you can choose to complete a lower level of identity verification - however, this will only permit you to demonstrate your COVID-19 status, not to view any underlying health data.
    3. It is important that you keep your NHS login credentials confidential and do not share these with any other person.
    4. We strongly recommend that you test the Service at home, prior to using it in a live setting, to ensure it works correctly and to give you time to discuss any issues with us (see the contact information provided below) or to consider alternative options to using the Service (such as taking a coronavirus test) where these are available.
  4. How the Service works
    1. The Service works by establishing whether you have (i) received both doses of COVID-19 vaccine; or (for domestic uses) (ii) have developed natural immunity (demonstrated by proof of a positive polymerase chain reaction (“PCR”) test within 180 days, but after the 10 day isolation period); or (iii) have received a recent negative test result for COVID-19, being a negative lateral flow device (LFD) or PCR test taken at a testing site, or at home and self-reported via the online Government reporting service.
    2. The Service does this by using your NHS login credentials to verify your identity, and to retrieve your COVID-19 vaccination or test data (if applicable) from the Approved Source System.
    3. It is important to note that the Service is dependent on external data sources, and on data sharing permissions, including those given to your GP. If in doubt, please refer to 119.
  5. Privacy
    1. Please refer to the Privacy Notice for further information about how the Service processes personal data and respects your rights of privacy and confidentiality under data protection laws or contact dataprotection@dhsc.gov.uk
  6. Your right to use the Service
    1. The Service and its content belongs to DHSC, NHS England or their respective licensors as appropriate, and are protected by intellectual property laws. As long as you comply with these Terms, you have a personal, perpetual, non-exclusive, non-transferable, revocable, limited licence to use the Service for your own personal use. We reserve all other licence rights not expressly permitted under these Terms.
    2. For the avoidance of doubt, any reproduction, representation, distribution, modification, adaptation or translation of the Service and its content, in whole or in part, is prohibited, except within the limit of these Terms or with the express authorisation of DHSC.
  7. Our liability to you
    1. We will use reasonable efforts to keep the Service up-to-date and functioning as intended.
    2. However, the Service is provided on an "as is" basis and, to the extent permitted by law, we make no other representations, warranties or guarantees, whether express or implied that the Service will be accurate at all times. We also cannot guarantee that the Service will be uninterrupted, secure or error or virus free, or that defects will be corrected.
    3. We will not be liable to you for:
      1. any use of the Service that does not comply with these Terms;
      2. any business loss (including but not limited to loss of profits, revenue, contracts, anticipated savings, data, goodwill or wasted expenditure);
      3. any loss or damage arising from an inability to access and/or use the Service;
      4. any indirect or consequential losses that were not foreseeable to both you and us when you commenced using the Service; or
      5. any loss or damage caused by a virus or other technologically harmful material that may infect your device or data due to your use of the Service.
    4. This clause 7 does not affect any legal rights you may have as a consumer in relation to defective services or software. Advice about your legal rights is available from your local Citizen's Advice or Trading Standards Office.
    5. Nothing in this clause 7 excludes or limits our liability for death or personal injury arising from our negligence, or our fraud or fraudulent misrepresentation, or any other liability that cannot be excluded or limited by law.
  8. Continuity of the Service
    1. We reserve the right to suspend, terminate or otherwise alter access to some or all of the Service at any time and without notice.
  9. Security
    1. If you discover a potential security vulnerability or suspect a security incident related to this service, please follow the vulnerability disclosure programme for the NHS COVID Pass Service and infrastructure. You can read our Vulnerability Disclosure Policy at www.nhsx.nhs.uk/
    2. You can report a vulnerability in the app, backend infrastructure or on the website by emailing covid-status.security@nhs.net
    3. The Service has been and will continue to be subjected to security audits.
  10. Complaints
    1. If you have complaints or concerns about the Service, please contact covid-status.complaints@nhs.net
  11. Miscellaneous
    1. We may revise these Terms of Use at any time and your continued use of the Service will be deemed acceptance of such revised Terms of Use. Any such revisions take effect when this page is published.
    2. These Terms of Use are governed by the laws of England and Wales.
    3. These Terms do not provide rights to, and may not be enforced by, any third party.
    4. Each of the clauses in these Terms operates separately. If any part of these Terms is determined to be invalid or unenforceable then the remainder of these Terms will remain in full force and effect.

Last updated: 23 June 2021