Former UK Labour deputy leader wants to know how the NHS's contact-tracing app will ensure user privacy
(2020/06/24)
- Reference: 1593015313
- News link: https://www.theregister.co.uk/2020/06/24/harriet_harman_contact_tracing_letter/
- Source link:
Harriet Harman MP, chair of Britain's Commons Human Rights Committee, has written to UK health secretary Matt Hancock seeking clarity on privacy aspects of the government's latest coronavirus contact-tracing app.
In [1]her letter , Harman acknowledges that although the switch from a [2]centralised data store model to a decentralised one , based on the contact-tracing tech advanced by Google and Apple, addresses some of the ongoing privacy concerns, other details remain unclear.
"It is still crucial that people in the UK should be able to feel reassured that their data protection, privacy, and non-discrimination rights are protected in any contact tracing system," she wrote.
Brits were told in April by Hancock and Prime Minister Boris Johnson that the NHS's IT wing, NHSX, was working with tech providers to produce a homegrown "world beating app", that would [3]send data to a central repository . The Reg , [4]back in May , was vocal in explaining why this was unwise.
Last week, the department finally admitted that it was scrapping those initial plans because the software developed didn't work as they'd hoped.
Harman's line of questioning touches on many points pertaining to the acquisition and retention of data, and quizzes Hancock on essential operational details, including how the app will handle data it isn't authorised to collect, as well as ensuring it doesn't discriminate against certain demographics.
The cross-party Human Rights Commission has been unequivocal in its insistence that any contact-tracing framework should be operated in a way that protects the public's right to privacy. While Harman hasn't advocated for any particular technological approach to the problem, she has nonetheless described existing data privacy as insufficient for the scope of a nationwide contact-tracing app.
"We don't want the system to rely on the individual integrity of any minister, or any ministerial team, or any government. That's not the way to protect rights. The way to have protections is through law," Harman [5]said in a May interview with The Reg .
The former deputy Labour leader has also called for the implementation of a contact-tracing tsar, which would be responsible for the governance of any eventual app, and would field complaints from the public.
The letter coincides with [6]the release of research from identity management firm Okta showing widespread public scepticism that data collected from the UK's contact-tracing app would be used solely for the stated purposes.
The survey, which encompassed 2,218 UK consumers, showed an overwhelming majority – 84 per cent – believe their contact-tracing data will be used for reasons other than stopping the spread of COVID-19. ®
Sponsored: [7]Modernizing Your .NET Application for Google Cloud Platform
[1] https://twitter.com/humanrightsctte/status/1275722975942189058?s=21
[2] https://www.theregister.com/2020/06/19/uk_looks_to_apple_and/
[3] https://www.theregister.com/2020/04/28/uk_coronavirus_google_apple_api/
[4] https://www.theregister.com/2020/05/05/uk_coronavirus_app/
[5] https://www.theregister.com/2020/05/20/uk_contact_tracing_protections/
[6] https://www.okta.com/blog/2020/06/the-cost-of-privacy-understanding-the-global-ramifications-of-data-collection/
[7] https://go.theregister.com/tl/1956/-8473/modernizing-your-net-application-for-google-cloud-platform?td=wptl1956
In [1]her letter , Harman acknowledges that although the switch from a [2]centralised data store model to a decentralised one , based on the contact-tracing tech advanced by Google and Apple, addresses some of the ongoing privacy concerns, other details remain unclear.
"It is still crucial that people in the UK should be able to feel reassured that their data protection, privacy, and non-discrimination rights are protected in any contact tracing system," she wrote.
Brits were told in April by Hancock and Prime Minister Boris Johnson that the NHS's IT wing, NHSX, was working with tech providers to produce a homegrown "world beating app", that would [3]send data to a central repository . The Reg , [4]back in May , was vocal in explaining why this was unwise.
Last week, the department finally admitted that it was scrapping those initial plans because the software developed didn't work as they'd hoped.
Harman's line of questioning touches on many points pertaining to the acquisition and retention of data, and quizzes Hancock on essential operational details, including how the app will handle data it isn't authorised to collect, as well as ensuring it doesn't discriminate against certain demographics.
The cross-party Human Rights Commission has been unequivocal in its insistence that any contact-tracing framework should be operated in a way that protects the public's right to privacy. While Harman hasn't advocated for any particular technological approach to the problem, she has nonetheless described existing data privacy as insufficient for the scope of a nationwide contact-tracing app.
"We don't want the system to rely on the individual integrity of any minister, or any ministerial team, or any government. That's not the way to protect rights. The way to have protections is through law," Harman [5]said in a May interview with The Reg .
The former deputy Labour leader has also called for the implementation of a contact-tracing tsar, which would be responsible for the governance of any eventual app, and would field complaints from the public.
The letter coincides with [6]the release of research from identity management firm Okta showing widespread public scepticism that data collected from the UK's contact-tracing app would be used solely for the stated purposes.
The survey, which encompassed 2,218 UK consumers, showed an overwhelming majority – 84 per cent – believe their contact-tracing data will be used for reasons other than stopping the spread of COVID-19. ®
Sponsored: [7]Modernizing Your .NET Application for Google Cloud Platform
[1] https://twitter.com/humanrightsctte/status/1275722975942189058?s=21
[2] https://www.theregister.com/2020/06/19/uk_looks_to_apple_and/
[3] https://www.theregister.com/2020/04/28/uk_coronavirus_google_apple_api/
[4] https://www.theregister.com/2020/05/05/uk_coronavirus_app/
[5] https://www.theregister.com/2020/05/20/uk_contact_tracing_protections/
[6] https://www.okta.com/blog/2020/06/the-cost-of-privacy-understanding-the-global-ramifications-of-data-collection/
[7] https://go.theregister.com/tl/1956/-8473/modernizing-your-net-application-for-google-cloud-platform?td=wptl1956
It will ensure user privacy
Anonymous Coward
by not having any users.
Teiwaz
how the NHS's contact-tracing app will ensure user privacy
Shouldn't she be asking if the NHS's contact-tracing app will ensure user privacy
Source Code
kmedcalf
Let's see the source code.
How do you "prove" that source was used to generate the binary blob?
What privacy indemnity do you have?
You probably have no indemnity against violations of privacy because the app *knowingly* contains violations of privacy. Not backing your crap with financial indemnity makes clear that their is no warranty or assurance that the app does what is claimed and in fact is a good indicator that it does the exact opposite of that which is claimed.
By not releasing it, I'd imagine
bluesxman
Can't hack what isn't there.
Chris G
A related item that to me at least seems like the thin end of an unwanted wedge, is the immunity passport. Is that still happening and will it work and impact on privacy and life in general in the UK?
how the NHS's contact-tracing app will ensure user privacy
They will put Chris Grayling in charge ?