Privacy versus Public Health? A Reassessment of Centralised and Decentralised Digital Contact Tracing

Research output: Contribution to journalArticleResearchpeer review

Authors

Research Organisations

View graph of relations

Details

Original languageEnglish
Article number23
Number of pages13
JournalScience and Engineering Ethics
Volume27
Issue number2
Publication statusPublished - 29 Mar 2021

Abstract

At the beginning of the COVID-19 pandemic, high hopes were placed on digital contact tracing. Digital contact tracing apps can now be downloaded in many countries, but as further waves of COVID-19 tear through much of the northern hemisphere, these apps are playing a less important role in interrupting chains of infection than anticipated. We argue that one of the reasons for this is that most countries have opted for decentralised apps, which cannot provide a means of rapidly informing users of likely infections while avoiding too many false positive reports. Centralised apps, in contrast, have the potential to do this. But policy making was influenced by public debates about the right app configuration, which have tended to focus heavily on privacy, and are driven by the assumption that decentralised apps are “privacy preserving by design”. We show that both types of apps are in fact vulnerable to privacy breaches, and, drawing on principles from safety engineering and risk analysis, compare the risks of centralised and decentralised systems along two dimensions, namely the probability of possible breaches and their severity. We conclude that a centralised app may in fact minimise overall ethical risk, and contend that we must reassess our approach to digital contact tracing, and should, more generally, be cautious about a myopic focus on privacy when conducting ethical assessments of data technologies.

Keywords

    COVID-19, Data ethics, Digital contact tracing, Efficacy, Privacy, Risk

ASJC Scopus subject areas

Sustainable Development Goals

Cite this

Privacy versus Public Health? A Reassessment of Centralised and Decentralised Digital Contact Tracing. / White, Lucie Alexandra; van Baßhuysen, Philippe Carl.
In: Science and Engineering Ethics, Vol. 27, No. 2, 23, 29.03.2021.

Research output: Contribution to journalArticleResearchpeer review

Download
@article{b6d0e4ce12264c5d843f67090b1230b4,
title = "Privacy versus Public Health? A Reassessment of Centralised and Decentralised Digital Contact Tracing",
abstract = "At the beginning of the COVID-19 pandemic, high hopes were placed on digital contact tracing. Digital contact tracing apps can now be downloaded in many countries, but as further waves of COVID-19 tear through much of the northern hemisphere, these apps are playing a less important role in interrupting chains of infection than anticipated. We argue that one of the reasons for this is that most countries have opted for decentralised apps, which cannot provide a means of rapidly informing users of likely infections while avoiding too many false positive reports. Centralised apps, in contrast, have the potential to do this. But policy making was influenced by public debates about the right app configuration, which have tended to focus heavily on privacy, and are driven by the assumption that decentralised apps are “privacy preserving by design”. We show that both types of apps are in fact vulnerable to privacy breaches, and, drawing on principles from safety engineering and risk analysis, compare the risks of centralised and decentralised systems along two dimensions, namely the probability of possible breaches and their severity. We conclude that a centralised app may in fact minimise overall ethical risk, and contend that we must reassess our approach to digital contact tracing, and should, more generally, be cautious about a myopic focus on privacy when conducting ethical assessments of data technologies.",
keywords = "COVID-19, Data ethics, Digital contact tracing, Efficacy, Privacy, Risk",
author = "White, {Lucie Alexandra} and {van Ba{\ss}huysen}, {Philippe Carl}",
note = "Funding Information: Open Access funding enabled and organized by Projekt DEAL.. This research was funded by the Volkswagen Foundation within the project “Digital Contact Tracing, Privacy, and Discrimination: On the Ethics of Fighting Corona”.",
year = "2021",
month = mar,
day = "29",
doi = "10.1007/s11948-021-00301-0",
language = "English",
volume = "27",
journal = "Science and Engineering Ethics",
issn = "1353-3452",
publisher = "Springer Netherlands",
number = "2",

}

Download

TY - JOUR

T1 - Privacy versus Public Health? A Reassessment of Centralised and Decentralised Digital Contact Tracing

AU - White, Lucie Alexandra

AU - van Baßhuysen, Philippe Carl

N1 - Funding Information: Open Access funding enabled and organized by Projekt DEAL.. This research was funded by the Volkswagen Foundation within the project “Digital Contact Tracing, Privacy, and Discrimination: On the Ethics of Fighting Corona”.

PY - 2021/3/29

Y1 - 2021/3/29

N2 - At the beginning of the COVID-19 pandemic, high hopes were placed on digital contact tracing. Digital contact tracing apps can now be downloaded in many countries, but as further waves of COVID-19 tear through much of the northern hemisphere, these apps are playing a less important role in interrupting chains of infection than anticipated. We argue that one of the reasons for this is that most countries have opted for decentralised apps, which cannot provide a means of rapidly informing users of likely infections while avoiding too many false positive reports. Centralised apps, in contrast, have the potential to do this. But policy making was influenced by public debates about the right app configuration, which have tended to focus heavily on privacy, and are driven by the assumption that decentralised apps are “privacy preserving by design”. We show that both types of apps are in fact vulnerable to privacy breaches, and, drawing on principles from safety engineering and risk analysis, compare the risks of centralised and decentralised systems along two dimensions, namely the probability of possible breaches and their severity. We conclude that a centralised app may in fact minimise overall ethical risk, and contend that we must reassess our approach to digital contact tracing, and should, more generally, be cautious about a myopic focus on privacy when conducting ethical assessments of data technologies.

AB - At the beginning of the COVID-19 pandemic, high hopes were placed on digital contact tracing. Digital contact tracing apps can now be downloaded in many countries, but as further waves of COVID-19 tear through much of the northern hemisphere, these apps are playing a less important role in interrupting chains of infection than anticipated. We argue that one of the reasons for this is that most countries have opted for decentralised apps, which cannot provide a means of rapidly informing users of likely infections while avoiding too many false positive reports. Centralised apps, in contrast, have the potential to do this. But policy making was influenced by public debates about the right app configuration, which have tended to focus heavily on privacy, and are driven by the assumption that decentralised apps are “privacy preserving by design”. We show that both types of apps are in fact vulnerable to privacy breaches, and, drawing on principles from safety engineering and risk analysis, compare the risks of centralised and decentralised systems along two dimensions, namely the probability of possible breaches and their severity. We conclude that a centralised app may in fact minimise overall ethical risk, and contend that we must reassess our approach to digital contact tracing, and should, more generally, be cautious about a myopic focus on privacy when conducting ethical assessments of data technologies.

KW - COVID-19

KW - Data ethics

KW - Digital contact tracing

KW - Efficacy

KW - Privacy

KW - Risk

UR - http://www.scopus.com/inward/record.url?scp=85103609412&partnerID=8YFLogxK

U2 - 10.1007/s11948-021-00301-0

DO - 10.1007/s11948-021-00301-0

M3 - Article

VL - 27

JO - Science and Engineering Ethics

JF - Science and Engineering Ethics

SN - 1353-3452

IS - 2

M1 - 23

ER -

By the same author(s)