UK researchers say countries must ensure data protection
Amidst the controversy over issuing of Covid-19 vaccine passports, a report has warned that lack of global standards for coronavirus certificate is a key barrier to their successful implementation around the world.
The UK’s University of Exeter research in its report has asked policymakers to ensure coronavirus health status certificate providers to abide by basic data protection principles, including lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability.
It has identified three key barriers to implementation — lack of trust, lack of global standards, and lack of a holistic approach.
The report recommends that the certificates should be only used during the pandemic and their use is discontinued once the WHO declares that Covid-19 is no longer a public health emergency of international concern.
It also says policymakers should ensure that Covid-19 health status certificate providers build data protection into the design of these certificates by default, and that the confidentiality and security of the information collected and processed are maintained. Providers of these certificates should prevent any unauthorised access, accidental loss, damage, or destruction of the data.
The report presents independent research funded by the Economic and Social Research Council (ESRC) as part of UK Research & Innovation (UKRI)’s rapid response to Covid-19.
The research was led by Dr Ana Beduschi, who carried out literature reviews and evaluations of primary and secondary sources of law. The research was also informed by twenty semi-structured interviews with technologists and experts in digital identity and certification conducted between December 2020 and March 2021.
Dr Beduschi said, “Focusing only on the technological solutions for Covid-19 health status certificates is not sufficient.
As these certificates have a direct impact on people’s rights, there is a crucial need to consider the laws and regulations, including those on data privacy and human rights.
“If effectively implemented, Covid-19 health status certificates may contribute to managing the effects of the current pandemic. Yet, their introduction poses significant challenges to data privacy, equality and non-discrimination. The urgency surrounding the adoption of these measures should not lead to governments rolling out Covid-19 health status certificates in haste without the appropriate protection of data privacy and human rights.
“Policymakers must strike an adequate balance between protecting the rights and freedoms of all individuals and safeguarding public interests, while managing the effects of the pandemic.”
The report emphasised that Covid-19 health status certificates should be available to all, not only to those with high levels of digital literacy, and highlighted the risks of fraud associated with paper-based certificates. The research also underlined the need for secure applications and embedded technologies such as QR codes.
Presently, individual nations have developed their own versions of a Covid passport which has allowed only those meeting the criteria to travel or participate in that country. But, with some countries lagging behind with vaccinations or using different vaccines, there are concerns that some could be left behind.