Contact tracing apps must be made with privacy at their heart and only keep data as long as necessary, governments have been told.
Countries including the UK are looking to contact tracing technologies in the fight against the coronavirus pandemic and a possible way to help end lockdown.
As already seen in places like Singapore, this would use Bluetooth to keep an anonymous log of every person an individual has been in close contact with and alert them if one should test positive for Covid-19.
While the technology has been welcomed as one potential solution to ease in a return to normality, it has also been met with concern for the public’s privacy.
The Organisation for Economic Co-operation and Development (OECD) has made a number of recommendations to decision-makers, saying a “privacy-by-design” approach – where personal data protections are built into the system by default – could help address the risks.
“Data should be retained only for so long as is necessary to serve the specific purpose for which it was collected,” the OECD’s report says.
It pointed towards a Covid-19 app developed by the Norwegian Institute of Public Health which is designed to store location data only for 30 days.
Governments are urged to consider whether the use of these technologies and the subsequent data-gathering is proportionate, as well as how the data is stored, processed, shared and with whom.
The public should be kept well-informed, with full transparency and accountability on the approaches adopted.
A recent study by Oxford University’s Nuffield Department of Medicine said a contact tracing app could help stop the spread of coronavirus but 80% of smartphone owners would need to use it.
The experts, who are advising the government and the NHS on the development of a UK contact tracing app, said basing an app around symptoms rather than waiting for test results could make a crucial difference to stopping the spread of Covid-19.
Earlier this month, health secretary Matt Hancock said in a commitment to transparency, the source code for its app will be published and said that data will not be held any longer than is necessary.
