This was done on a ‘public task’ justification under UK GDPR as they were necessary to protect people who were believed to be most at risk at the time.
Cafodd hyn ei wneud ar sail ‘tasg gyhoeddus’ o dan GDPR y DU am fod hynny’n angenrheidiol er mwyn amddiffyn y bobl y credid eu bod yn wynebu’r risg fwyaf ar y pryd.