The Coronavirus (Safeguards) Bill 2020: Proposed protections for digital interventions and in relation to immunity certificates

• DOI: 10.31228/osf.io/yc6xu
• Publication Date: 2020-04-14T05:04:11Z
• Authors: Lilian Edwards; Michael Veale; Orla Lynskey; Rachel Coldicutt; Nóra Ni Loideain; Frederike Kaltheuner; Marion Oswald; Rossana Ducato; Burkhard Schafer; Elizabeth Renieris; Aileen McHarg; Elettra Bietti
• Keywords: Mandate; Contact tracing; Directive

This Bill attempts to provide safeguards in relation the symptom tracking and contact tracing apps that are currently being rolled out UK; anticipates minimum will be needed if we move on a roll of “immunity certificates” (commonly known as passports) near future. It does not mandate any particular technological approach building nor it attempt duplicate GDPR ePrivacy Directive. Instead suggests some basic need placed top what these laws already supply.Although no one wants delay or deter massive effort fight coronavirus all involved in, there clear reasons put law like this place sooner rather than later:(a)The portion population which is digitally excluded needs reassurance further entrench their exclusion(b)Uptake app, crucial its success improved app both trusted trustworthy. Voluntary use this. Accordingly suggest principle non-compulsion includes making sure no-one such employers service providers can, way compulsion, discriminate against those who have installed used app.(c)Connectedly, data quality much higher people with confidence do false information them, withhold information, for fear misuse discrimination (d)Both uptake also citizens feel they rights police gathered via robust swift complaints mechanism(e)Public trust enhanced an independent body whose remit wider just protection has watching brief report whole scheme privacy but discrimination, freedom movement, due process et alAccordingly draft makes that(a)No shall penalised having phone (or other device), leaving house without phone, failing charge etc (b)No compelled install share messages status (eg employer insurer university)(c)Personal collected by contained immunity certificate, shared beyond NHS researchers unless securely anonymised.(d)What true, secure, verifiable, anonymisation certified stringent Code Conduct(e)Personal certificate must deleted anonymised soon possible, at latest immediately after emergency period expired.(f)“Immunity passports” become novel uncontrolled internal passports, either state private sector ways necessary proportionate legitimate social goal controlling COVID-19.