The spread of Coronavirus (COVID-19) has led governments to take a number of measures to protect their citizens - including lockdowns, telecommuting and online education.
However, the pandemic is also leading to greater state control and scrutiny over the private lives of its citizens through the use of latest digital surveillance technologies.
When it comes to balancing measures that could help track and contain the virus and safeguard privacy of individuals, where is the line?
The answer is not a straightforward one. On one hand, digital solutions are helping save lives, by spreading health messages, increasing access to remote physical check-ups and health alerts. At the same time, surveillance tools that trace individuals’ location and their contacts present profound challenges to privacy, data protection rights and freedom of information.
In our region, the past few weeks have seen a proliferation of tracing surveillance solutions. At least nine countries have already started deploying tracking tools. In the absence of strong data protection and privacy laws, and in light of pre-existing trends of law enforcement surveillance, we are concerned that such measures may pose significant future risks to the privacy of individuals, and to freedom of expression and assembly. If the application of such tools is not subjected to careful privacy/data protection due diligence, it may further degrade trust in public authorities and undermine the effectiveness of states’ public health responses.
In North Macedonia, for example, the government has launched a Bluetooth-based app “Stopkorona!” to trace and inform the contacts of COVID-19 affected people. The app “warns users if they have come into contact with someone who has tested positive for the novel coronavirus, based on the distance between their mobile devices”. A similar app proposed by a group of young entrepreneurs is currently under discussion in Turkey.
So far, these apps seem to comply with privacy by design principles that deliver a maximum degree of privacy by ensuring that personal data protection is built into the system. They allow for consent of data subjects, as well as the anonymization, minimization, decentralization of data and their time-bound use – so that data can be deleted once the need for its use is over. The Stopkorona! app makes registration voluntary, and all the data is located on the user’s phone except for cases when the person is diagnosed with COVID-19. Only then does the Ministry of Health receive access to the user’s recent app entries in order to contact other app users that have been in the vicinity of the newly diagnosed person.
But this may not be the case every time. Authorities are collaborating with telecommunication service providers to access geolocation data to track the population. In the case of Turkey, the government has launched a GPS-based centralized app, making registration of all COVID-19 affected people mandatory. A similar app in Kyrgyzstan, though it claimed to be based on voluntary consent, was later reported to be mandatory for persons put into quarantine. In Azerbaijan, people’s movements are controlled by an application that issues electronic permits to people who would like to leave their homes during quarantine and is accessible to the police, while Kazakhstan has relied on video surveillance to find violators of the quarantine regime.
In Armenia, even in the absence of any publicly announced digital solution, the government has adopted a new law, permitting operators and medical personnel to share with authorities citizens’ personal data, location and contacts, including the data related to their phone calls’ time and length. Finally, while other governments are deploying digital instruments in order to address the spread of the virus, Montenegro has taken an even “easier” route. The government is regularly publishing the names and the addresses of quarantined citizens on its official website, calling the public to help the authorities monitor their self-isolation.