| |
| META TOPICPARENT | name="FirstPaper" |
|---|
Contact Tracing Privacy Concerns |
|
<
< | -- By SophiaHan - 08 Mar 2022 |
>
> | -- By SophiaHan - 08 Mar 2022 (revised April 23, 2022) |
| |
Introduction |
|
<
< | Since its emergence in late 2019, COVID-19 has usurped many facets of our everyday living. From mask mandates to stay-at-home orders, old norms of daily living were quickly replaced by the harsh reality of living in a public health crisis. Amidst these changing norms, concerns about privacy arose as governments across the world implemented various tracking utilities to monitor and fight the spread of the virus. Even private companies, at the behest of the government, began to monitor their employees, checking their health status and travel. |
>
> | Since its emergence in late 2019, COVID-19 has usurped many facets of our everyday living. From mask mandates to stay-at-home orders, old norms of daily living were quickly replaced by the harsh reality of living in a public health crisis. Amidst these changing norms, concerns about privacy arose as governments across the world implemented various tracking utilities to monitor and fight the spread of the virus. |
| | Most notably, contact tracing apps have been heralded by many governments as a novel way of curbing the spread of COVID-19. However, the effectiveness of these apps is balanced by the level of privacy measures in place.
COVID-19: Contact Tracing Apps |
|
<
< | On October 1, 2021, New York state released an app that can notify people if they have come into contact with someone who tested positive for COVID-19. Called “COVID Alert NY,” the app is one of several in the United States based on Apple and Google’s surprising joint privacy preserving contact tracing system. Apple and Google’s contact tracing system uses Bluetooth to enable exposure notification, and is opt-in and anonymous to assuage some of the privacy concerns. When a person opts in to receive exposure notifications, their phone emits a Bluetooth signal that is shared with nearby phones that have also opted in to the system. If a person tests positive for COVID-19 and enters a code from a public health authority into the system, notifications are sent to other people’s phones that picked up the infected person’s signal within the past 14 days. |
>
> | On October 1, 2021, New York released an app that can notify people if they have come into contact with someone who tested positive for COVID-19. Called “COVID Alert NY,” the app is one of several in the United States based on Apple and Google’s surprising joint contact tracing system. Apple and Google’s contact tracing system uses Bluetooth to enable exposure notification, and is opt-in and anonymous to assuage some of the privacy concerns. Effectiveness is measured by how accurately these apps trace and monitor COVID-19, aiding public health authorities take appropriate measures to curb its spread. Despite these features, contact tracing apps in the United States have undoubtedly been a huge failure. |
| | |
|
<
< | Other countries worldwide have had mixed success with similar contact tracing apps. In South Korea, for example, contact tracing apps were relatively effective in curbing the spread of the virus, but at a significant cost to people’s privacy. The South Korean government used phone logs, card transaction records, and surveillance camera footage to monitor infected people’s locations and close contacts. Interestingly, public opinion in South Korea about surveillance have been positive. On the other hand, European countries, which tend to be more privacy conscious, opted for a voluntary app-based model. Compared to South Korea, European countries have had fewer success. Researchers estimate that it would take roughly 60% of a population to participate in a voluntary contact tracing program for it to be effective without any other severe measures (e.g., lockdowns). But no European country has had that high of a download rate. |
>
> | A key reason for this failure was the lack of trust among Americans in the tech companies and the government. One survey reported that 71% of reported smartphone users would not use the app because of privacy concerns. The effectiveness of contact tracing apps, however, largely depends on the installation rate among a population. Researchers estimate that it would take roughly 60% of a population to participate in a voluntary contact tracing program for it to be effective without any other severe measures (e.g., lockdowns). |
| | |
|
<
< | In the United States, contact tracing apps have undoubtedly been a huge failure. A key reason for this failure was the lack of trust among Americans in the tech companies and the government. One survey reported that 71% of reported smartphone users would not use the app because of privacy concerns. This is unsurprising given how little information the public is told on privacy laws. |
>
> | Other countries worldwide have had mixed success with similar contact tracing apps. In South Korea, for example, contact tracing apps were relatively effective in curbing the spread of the virus, but at a significant cost to people’s privacy. The South Korean government used phone logs, card transaction records, and surveillance camera footage to monitor infected people’s locations and close contacts. China fared slightly better than South Korea in terms of user effectiveness because of its mandatory use and centralized government monitoring. But, of course, this was met with a troublesome cost to user privacy.
In considering improvements to maximize effectiveness for contact tracing apps, a few characteristics stand out. First, a decentralized architecture increases user privacy compared to a centralized approach. Second, close-proximity tracking, such as the one designed by Apple and Google, may not be enough to provide reliable information and curb the spread of a rapidly growing virus. Indeed, contact tracing alone, as it stands, is insufficient to effectively halt the spread of a virus like COVID-19; it must still be implemented alongside other preventative public health measures. Lastly, building trust among users is arguably one of the most crucial steps to be taken, and we can do so by establishing better privacy laws that increase transparency. |
| | Insufficient Privacy Protections |
| | The Federal Trade Commission Act allows the FTC to have limited enforcement authority for privacy intrusions related to consumer protection. Specifically, it permits the FTC to challenge “unfair or deceptive acts or practices” in commerce, such as misrepresentations about data privacy or data practices that cause substantial consumer injury. While the FTCA may arguably be the broadest federal law when it comes to privacy, it is insufficient to meet the specific privacy needs that arise from COVID-19. The Act fails to regulate how data from COVID-19 tracing apps can be used, stored, or shared. It generally leaves these crucial decisions up to the companies themselves. |
|
<
< | Some state laws attempt to narrow the gap left by federal privacy legislation. Perhaps one of the most robust privacy legislation, the California Consumer Privacy Act (“CCPA”) gives individuals more control over their personal information that businesses collect, such as the right to delete some personal information collected from them, the right to opt-out of the sale of their personal information, and the right to know about the personal information a business collects and how it is used and shared. But even this statute is limited, as it does not pertain to government agencies and would hardly cover the nationwide scale of contact tracing apps. |
>
> | Some state laws attempt to narrow the gap left by federal privacy legislation. Perhaps one of the most robust privacy legislation, the California Consumer Privacy Act (“CCPA”) gives individuals more control over their personal information that businesses collect, such as the right to delete some personal information, the right to opt-out of the sale of their personal information, and the right to know about the personal information a business collects. But even this statute is limited, as it does not pertain to government agencies and would hardly cover the nationwide scale of contact tracing apps. |
| | Conclusion |
|
<
< | The COVID-19 pandemic revealed how sorely ill-prepared the United States is in handling a global public health crisis. Contact tracing apps have been proven to be effective, |
>
> | The COVID-19 pandemic revealed how sorely ill-prepared the United States is in handling a global public health crisis. Contact tracing apps have the potential to be effective, but only to the extent that the public is willing to use them. An obvious hurdle to this is getting more Americans to trust major tech companies and the government. This can be achieved if we had better privacy protections in place to regulate government control of our personal data. Naturally, people who are truly concerned about their digital privacy will most likely opt out of contact tracing programs or not possess the infrastructure to implement such a program. But for a majority of the population, who will continue to rely on smartphones, greater trust in privacy protections among these contact tracing apps is crucial to their increased usage. |
| |
Where? Could you source this statement, please?
|
|
<
< | but only to the extent that the public is willing to use them. An obvious hurdle to this is getting more Americans to trust major tech companies and the government. This can be achieved if we had better privacy protections in place to regulate government control of our personal data. |
| |
I think the best route to improvement here is to examine the premise a little more closely. No one derived any advantage of which I am aware from the direct use of the applications for their intended purpose. Contact tracing systems everywhere have been eventually overwhelmed by the nature of the actual pathogen, as SARS-CoV-2 has become so successfully infectious. Stranger communications traceable only by near-field communication registration were not sufficiently important to the spread of the illness to make this use of smartassphones relevant. If this is true, the whole point of the piece needs to be changed, so it's important to see what the evidence of effectiveness is. You show no sources on this. |