Technology assisted contact tracing (TACT), including contact tracing apps, have quickly become a component in many organizations and communities plans to combat COVID-19. Just as quickly as TACT entered the conversation, so did privacy concerns. In the haste to implement TACT solutions, there are concerns that TACT systems are not being narrowly tailored to achieve the goals of contact tracing, and that broader TACT operations may create unnecessary vulnerabilities to users privacy. The Country of Norway dealt with these privacy issues head-on when the countys data protection authority raised these tailoring concerns in June, determining that the app proposed a disproportionate threat to user privacy and requiring the country to entirely halt use of its nationwide contact tracing app.
It is not just privacy watchdogs who are policing the use of TACT and its privacy implications. The individual users and potential users have enormous influence over the effectiveness of TACT. Widespread adoption is crucial for the success of a TACT system, with some studies suggesting that 60% of a population would need to install and use a contact tracing app to effectively slow the spread. However, consumers privacy concerns can be a heavy barrier to adoption. TACT requires collection not only of static personal data about users, but also (depending on the particular technology used) locations, movements, and relationships between users. Privacy conscious consumers are particularly sensitive to location tracking, and many will not participate in a TACT system they do not trust to protect such personal and vulnerable data. This may be particularly true in the United States, where there is no national or uniform set of laws regulating how personal information may be collected or used by TACT systems.
While TACT systems by nature need to collect personal data about their users, there are technical and administrative safeguards TACT system vendors and authorities can take to assuage user concerns and reduce privacy risks to build the trust in the system that its requires to succeed. Norways fraught implementation outlines some of the privacy implications and risks associated with TACT that users are wary of, and those protective measures that organizations and communities should consider implementing in connection with any TACT system to help mitigate those vulnerabilities and protect user privacy.
A common concern raised by privacy experts and consumers alike is the scope of data being collected by TACT systems, with location data being a particular point of concern. Location data raises special privacy concerns not only because it is often difficult or impossible to anonymize with the potential to reveal detailed personal information (even without intentional use of names) about a users movements and associations, but also because it is not actually necessary for effective contact tracing. Norways contact tracing app collected location data, contributing to the national data protection authoritys determination that the app collected and stored more data than necessary to achieve its contact tracing purposes. Effective contact tracing typically identifies whether two users have been in close contact, not where they met. TACT systems like Apple-Googles joint solution use Bluetooth technology, measuring the strength of Bluetooth signal between the two users devices to determine whether two users have come in close contact with each other, to track potential contact between users without having to track their locations.
Another privacy concern raised by privacy experts, and cited by Norways data protection authority in its suspension of the nations contact tracing app, is the centralization of data collected through TACT. This become especially concerning for users when TACT data is centralized in the control of an authoritative entity like a government, employer or university, which may have particular power over the individual. Further, centralization, even in the hands of a good actor, makes data more vulnerable to attack by bad actors, as it creates one point of access, allowing the breach of a single source to result in the data of all users being compromised. TACT systems like the Apple-Google joint solution rely on minimal centralization, storing data collected through the solution locally on user devices until and unless a user voluntarily elects to push information, i.e. to report a positive test result, out to a central authority. This decentralized approach gives users more control over the use of their information, and reduces the risk of wide-reaching breach or abuse.
A lack of clarity as to how data is being collected through TACT systems will be used was the final nail in the coffin for Norways national contact tracking app, with the nations data protection authority citing the ambiguity as yet another concern resulting in its suspension of the app. Clarity as to use of the TACT data may be of particular importance in the United States, since there is no central privacy scheme guaranteeing protections for users or outlining permissible use of such information. This creates uncertainty both for individuals, who cannot be sure of what privacy rights or protections they may have, if any, with respect to their TACT data, and organizations and governmental authorities looking to implement TACT systems, who cannot be sure whether their use of the data may violate some component of the United States decentralized web of privacy regulations.
TACT system vendors and designers, as well as organizations and authorities looking to implement TACT systems, may want to take a cue from Apple and Google, who have publically committed to minimizing data used by their joint solution and to not monetizing the project. This kind of transparency and limitation on usage to the minimum necessary for contact tracing may both help build trust in users and reduce the risk of an entitys use of data running afoul of privacy regulation.
With the power to collect and use vital personal information of their users, contact tracing apps are a double edged sword in the fight against COVID-19, as the same data that can reduce a communitys vulnerability to the virus can increase the data subjects vulnerability to privacy violations. The information collected by TACT is not just protected as personal information, like health status and personal health information, but is also the type of information particularly vulnerable to abuse and stigmatization. Contact tracing app providers and technology vendors providing the foundational technology systems and services should be transparent about their privacy and data collection practices, and should commit to restricting their use of the data for contact tracing purposes. Organizational users, like governments, employers and universities implementing TACT systems should make similar commitments to limited use and transparency to reduce the risk of privacy violations and establish trust with users to encourage the pervasive use of the system required for it to be effective.
[View source.]
Read more:
Privacy Risks and Implications of Contact Tracing Apps and Related Technologies - JD Supra
- Intentional Community and Capitalism - Shareable - April 10th, 2024 [April 10th, 2024]
- How alternative communities have evolved from pacifist communes to a solution to the ageing population - The Conversation - March 12th, 2024 [March 12th, 2024]
- Georgia Power Announced T. Dallas Smith named to Georgia ... - All On Georgia - November 18th, 2023 [November 18th, 2023]
- CSRWire - Thought Leaders Gather for Critical Community ... - CSRwire.com - November 18th, 2023 [November 18th, 2023]
- EPA centers diversity with first-ever environmental youth advisory council - Yahoo News - November 18th, 2023 [November 18th, 2023]
- Rigor, Relevance, & Reality: Education Collaboratory at Yale ... - Yale School of Medicine - November 18th, 2023 [November 18th, 2023]
- Gaza: UN experts call on international community to prevent ... - ReliefWeb - November 18th, 2023 [November 18th, 2023]
- Fathering Together Announces Acquisition of City Dads Group - PR Web - November 18th, 2023 [November 18th, 2023]
- Company to pay over $50 million in largest environmental lawsuit settlement in D.C. history: Health risks to the public - Yahoo News - November 18th, 2023 [November 18th, 2023]
- Student death is now part of the routine at Middlebury - The Middlebury Campus - November 18th, 2023 [November 18th, 2023]
- We welcomed an abandoned dog into our family. But dog dumping ... - Kansas Reflector - November 18th, 2023 [November 18th, 2023]
- The National Climate Assessment Goes Woke - Dallasweekly - November 18th, 2023 [November 18th, 2023]
- A Conversation about History, Race and the Meaning of True ... - Philanthropy Roundtable - November 18th, 2023 [November 18th, 2023]
- The color of community | WORLD - WORLD News Group - November 18th, 2023 [November 18th, 2023]
- Kindness has good benefits | News, Sports, Jobs - The Review - November 18th, 2023 [November 18th, 2023]
- Georgia Power Foundation awards grant for BIG Edge ... - Georgia Southern University Newsroom - November 18th, 2023 [November 18th, 2023]
- "Chilling": Maryland lawmakers threaten to cut aid to immigrants ... - Salon - November 18th, 2023 [November 18th, 2023]
- Three water options come with high cost | News, Sports, Jobs - Evening Observer - November 18th, 2023 [November 18th, 2023]
- Welcome to the Team, Kintan! | Office of Immigrant Affairs - Philadelphia Water Department - July 11th, 2023 [July 11th, 2023]
- Fannie Mae Recognized for Its DEI Efforts - DSNews.com - July 11th, 2023 [July 11th, 2023]
- Fannie Mae Named 'Best Place to Work for Disability Inclusion' and ... - Fannie Mae - July 11th, 2023 [July 11th, 2023]
- Focused on progress - Weekly Challenger - July 11th, 2023 [July 11th, 2023]
- Good Ancestors and Messengers of Hope - Digital Journal - July 11th, 2023 [July 11th, 2023]
- 'Make it intentional': 3-N-1 Trinity Services helps young ... - Longview News-Journal - July 11th, 2023 [July 11th, 2023]
- 'Latinistas' is the World's First All-Latina Fashion Doll Line - hiplatina.com - July 11th, 2023 [July 11th, 2023]
- CSU Releases Findings of Three-Year Research Study on NAVA'S ... - InvestorsObserver - July 11th, 2023 [July 11th, 2023]
- Press Ganey's Physician of the Year on a cardiology 'game changer ... - Becker's Hospital Review - July 11th, 2023 [July 11th, 2023]
- City Officials Join Summer Campers and Local Artists to Kick Off ... - Philadelphia Water Department - July 11th, 2023 [July 11th, 2023]
- Merrill and Linda Hutchinson on Communication for a Summer of ... - Digital Journal - July 11th, 2023 [July 11th, 2023]
- Feathers installed as Rotary District Governor | News, Sports, Jobs - The Inter-Mountain - July 11th, 2023 [July 11th, 2023]
- Theatre at St. Luke's: All Shook Up to The Little Mermaid - Orlando Sentinel - July 11th, 2023 [July 11th, 2023]
- Culture wars rage on, forcing marketers to decide whether to ... - Marketing Dive - July 11th, 2023 [July 11th, 2023]
- Some thoughts on governance of the local variety - Resilience - July 6th, 2023 [July 6th, 2023]
- 988 is saving lives, but more awareness and support needed - Alton Telegraph - July 6th, 2023 [July 6th, 2023]
- The Limitations of Eco-Anxiety | Atmos - Atmos Magazine - July 6th, 2023 [July 6th, 2023]
- Welcome Back: How JAPER Becomes Real for the People in Brazil ... - Just Security - July 6th, 2023 [July 6th, 2023]
- Now Is the Time to Go All In on Heat Pumps - Rocky Mountain Institute - July 6th, 2023 [July 6th, 2023]
- Tennessee Department of Transportation (TDOT) celebrates 40th ... - Elizabethton.com - July 6th, 2023 [July 6th, 2023]
- Discrimination or bureaucracy? A Jewish community in Germany ... - The Jerusalem Post - July 6th, 2023 [July 6th, 2023]
- AAP Rules And Guidelines For How To Keep Kids Safe From Cars - Fatherly - July 6th, 2023 [July 6th, 2023]
- Pine County Sheriff's Report and Jail Roster | Communities ... - Pine City Pioneer - July 6th, 2023 [July 6th, 2023]
- Is a Hanan Ben Ari concert the solution for Jewish divisions? - opinion - The Jerusalem Post - July 6th, 2023 [July 6th, 2023]
- What the LGBT wedding website Supreme Court ruling means for ... - The Atlanta Journal Constitution - July 6th, 2023 [July 6th, 2023]
- Out at CHM hosts its first 2023 event - Windy City Times - July 6th, 2023 [July 6th, 2023]
- 'The time is now': Longtime friends launch support organization for ... - The Lawrence Times - July 6th, 2023 [July 6th, 2023]
- La Vergne Receives Municipal League Award for Excellence in Fire ... - rutherfordsource.com - July 6th, 2023 [July 6th, 2023]
- UW System offers status update on its five-year strategic plan (day 1 ... - University of Wisconsin System - July 6th, 2023 [July 6th, 2023]
- Hawaii Native Krystal Ka'ai Tackles Equity And Anti-Asian Hate For ... - Honolulu Civil Beat - July 6th, 2023 [July 6th, 2023]
- News & events / News - Diocese of York - July 6th, 2023 [July 6th, 2023]
- Businesses that address social or environmental problems often ... - The Conversation - July 6th, 2023 [July 6th, 2023]
- EFOC: Is This Happening To Me Because I'm Black? Combating ... - Essence - July 6th, 2023 [July 6th, 2023]
- Stations Telling Diverse Stories With Sponsored Segments from ... - Next TV - July 6th, 2023 [July 6th, 2023]
- Ex-Prisoners Face Headwinds as Job Seekers, Even as Openings ... - The New York Times - July 6th, 2023 [July 6th, 2023]
- Bungie weighs in on the current argument raging through the ... - PC Gamer - July 6th, 2023 [July 6th, 2023]
- Myanmar: Dire humanitarian and human rights situation ... - OHCHR - June 30th, 2023 [June 30th, 2023]
- Invest in our public schools - EdNC - June 30th, 2023 [June 30th, 2023]
- N.Y. stands up for LGBTQ equality: Having Pride 12 months a year - New York Daily News - June 30th, 2023 [June 30th, 2023]
- NASCAR, Bubba Wallace bring 'Bubba's Block Party' to Chicago - Daytona Times - June 30th, 2023 [June 30th, 2023]
- Fifth Third's 2022 Sustainability Report Shares Progress on Priorities ... - InvestorsObserver - June 30th, 2023 [June 30th, 2023]
- Top LGBTQ+ Financial Influencers to Learn from in 2023 - Investopedia - June 30th, 2023 [June 30th, 2023]
- 'Retirement is so traditional,' try periodic retirement to figure out ... - Morningstar - June 30th, 2023 [June 30th, 2023]
- Crisis of missing and murdered Indigenous people brings federal ... - New Mexico In Depth - June 30th, 2023 [June 30th, 2023]
- The Astounding Power of Intentional Productivity (And How You Can ... - The Good Men Project - June 30th, 2023 [June 30th, 2023]
- What SCOTUS ruling on affirmative action means for UL schools - Louisiana Radio Network - June 30th, 2023 [June 30th, 2023]
- Community managers find the path for developers and players to ... - VentureBeat - June 30th, 2023 [June 30th, 2023]
- The EPA was ready to clean up 'Cancer Alley.' Then it backed off. - Grist - June 30th, 2023 [June 30th, 2023]
- What Bidenomics Means for Workers and Families - UpNorthNews - June 30th, 2023 [June 30th, 2023]
- The vital link between a healthy press and our republic - The Fulcrum - June 30th, 2023 [June 30th, 2023]
- Death, Drag, and Decadence shows off the queer joy of DnD - Wargamer - June 30th, 2023 [June 30th, 2023]
- Israeli Expats in the U.S.: 'I Speak English, but I Don't Speak American' - Tablet Magazine - June 30th, 2023 [June 30th, 2023]
- NTSB hearings end with talks on tanker conditions, fire's aftermath - Marietta Times - June 30th, 2023 [June 30th, 2023]
- Can 'Friendship Clubs' Cure the Loneliness Created by Remote Work? - The San Francisco Standard - June 4th, 2023 [June 4th, 2023]
- 'Men in Blazers' Podcast Comes to Higher Ground to Talk Vermont ... - Seven Days - June 4th, 2023 [June 4th, 2023]
- Mindfulness, breathwork expert preaches value of slow living to Black and brown communities - Yahoo News - June 4th, 2023 [June 4th, 2023]
- Idaho's physician shortage is here. Here's what we can do about it. - Idaho Capital Sun - June 4th, 2023 [June 4th, 2023]
- Awards Ceremony Shines Spotlight on Caltech's Trailblazers in ... - Caltech - June 4th, 2023 [June 4th, 2023]
- The African American Museum of Iowa Announces Juneteenth ... - River Cities Reader - June 4th, 2023 [June 4th, 2023]
- US Supreme Court Rules Against Striking Drivers Who Abandoned ... - Engineering News-Record - June 4th, 2023 [June 4th, 2023]
- The Future of the Thomaston Green is Green (or should be) - PenBayPilot.com - June 4th, 2023 [June 4th, 2023]
- The Elephant in the Ethernet Port - City Journal - June 4th, 2023 [June 4th, 2023]