Covid-19 tracking apps rise despite privacy fears

BRUSSELS -- European leaders anxious to reopen their societies are counting on mobile phone tracking technology to help keep the novel coronavirus in check, but they face a formidable obstacle: convincing their privacy-conscious citizens to use the tools.

European governments, which have sought to be global standard-bearers in their commitment to privacy protections, are having to tread more cautiously than South Korea, Israel and China, where digital surveillance is being used aggressively to follow citizen's movements and identify those who may have been exposed to the virus.

Even still, in Europe -- especially in Germany and Austria, where memories of authoritarian government excesses from the last century linger -- many people have little desire to adopt the voluntary technology their governments have begun to promote.

The result may be a setback for the efforts of public health officials, who say a majority of a society needs to use the trackers for them to be most effective.

[CORONAVIRUS: Click here for our complete coverage » arkansasonline.com/coronavirus]

Austria, which began to loosen coronavirus restrictions last week, was one of the first countries in Europe to deploy coronavirus tracking technology. Its "Stop Corona" app, released by the Austrian Red Cross, has managed to make privacy advocates happy, yet has stoked public concern all the same.

"Usually the privacy professionals, the activists, are the people who are saying it's crazy what you're doing, think about it twice," said Max Schrems, an Austrian privacy lawyer who successfully sued Facebook over its data practices but who has embraced his country's tracking app.

"I sense that the public is often more afraid of these things than the privacy professionals right now," he said. "If you have a proper design, it's hard to misuse, but that's something that in daily life people do not differentiate."

The Austrian app uses the Bluetooth transmitter on users' phones to monitor other phones that come near them. It keeps that information on the phone. If a person later suspects he has come down with covid-19 or has received a formal diagnosis, that information can be uploaded from the app to alert others, anonymously, that they may have been exposed. If users want to stop being tracked, they can simply delete the app and the data. No central database exists.

Germany, France, the Netherlands and Britain are among those exploring apps that work along the same lines: opt-in rather than mandatory, with data kept anonymous, and no GPS information going to governments or telecom companies.

The approach could appeal in the United States, where many citizens are likewise distrustful of government snooping. Google and Apple announced last week that they would collaborate to build a similar system that could work on iPhones and Android phones.

Earlier in the outbreak, many countries looked at anonymized GPS data to assess how well their lockdown orders were working and how many people were still moving around. But policymakers and engineers like Bluetooth for contact-tracing, because it is more accurate than GPS in dense urban settings -- even though it doesn't pick up certain kinds of indirect contact, such as when someone with covid-19 sneezes in an elevator, then leaves, and another person enters minutes later, potentially facing exposure.

Bluetooth also has an advantage in that it doesn't require the sorts of centralized databases that privacy advocates fear would be prone to abuse.

"If you're going to store all this stuff in the cloud somewhere, at some point, there will be some guy somewhere saying, 'Oh, isn't that interesting.' If you have the key to all that data, they'll find a new purpose," said Sophie in 't Veld, a Dutch member of the European Parliament who works on privacy issues and has called for hearings about the tools under development.

Some countries have done little to allay concerns. Poland last month started requiring people who have covid-19 to download a tracking app and upload selfies to prove they are staying indoors, or else they could face visits from the police. The data may be held for years.

"Even if it's done with the best of intentions, we need to be careful that these measures don't become permanent," said Diego Naranjo, the head of policy at European Digital Rights, an advocacy group that seeks to protect digital privacy.

The European Union's strictest-in-the-world data privacy law, known by its abbreviation, GDPR, contains exceptions for public health emergencies, meaning its most stringent measures do not apply to tools intended for use in fighting the pandemic. But privacy advocates say leaders still need to follow the law and to be mindful of how data is collected and stored.

"We need to find a way to harness technology that respects our values, especially when that technology is about deeply personal things, your health," said Julian King, who until last year was the European Union's top official charged with improving the bloc's response to security crises. "You're only going to get broad uptake of these measures if there's a discussion about what consent means, what people are signing up to do."

​​​​​Information for this article was contributed by Quentin Aries of The Washington Post.

A Section on 04/19/2020

Upcoming Events