Ireland’s government must build strong data protections into a contact tracing app designed to stop the spread of the coronavirus, a coalition of privacy advocates and academics said Wednesday.
The government should reveal partners that are helping to develop the app and meet European privacy law requirements, advocates including Digital Rights Ireland and the Irish Council for Civil Liberties said.
The groups issued proposed guidelines designed to help the government build consumer confidence in a digital contact tracing tool the nation’s health officials are developing.
“Without the public’s trust and buy-in, this app will not be effective,” said Eugenia Siapera, head of the Information and Communications Studies School at University College Dublin.
Information collection must be necessary, proportionate, and effective, according to the guidelines. There also must be a “clear and limited purpose” for technologies to process data, the groups said.
The country’s Data Protection Commission is reviewing the government’s data protection impact assessment required under EU law, said Graham Doyle, deputy commissioner for the office.
Ireland’s Department of Health and the Health Service Executive should publish source code so researchers can review whether the tool meets privacy requirements under Europe’s General Data Protection Regulation, according to the guidelines.
The department said in a statement it and the executive would publish the source code, as well as the data protection impact assessment, and other information “as soon as possible” before the app is launched.
“Privacy-by-design has underpinned all aspects of the Covid Tracker app development,” the department said. “The Irish app is being developed to comply with recent European Commission recommendations and guidance documents on privacy.”
A representative for the executive didn’t immediately respond to a request for comment.