Reprinted from Health and Human Rights Journal, April 29, 2020
The COVID-19 lockdown has proven economically devastating, and to enable people to move freely and start national economies moving also, many governments are exploring digital contact tracing. Mobile phone apps that track individual movements can enable real-time health surveillance and case management. However, once it exists, that data on health and individual movements can pose real threats for everyone—particularly for women and girls, and for marginalized and disfavored groups. Racing to embrace digital contact tracing without putting laws and policies in place to address the stigma surrounding the epidemic, and to protect the rights of those most marginalized, risks undermining the goal of epidemic control.
Groups that have historically experienced discrimination, stigma, and abuse may be exposed to greater risk of persecution as data on coronavirus transmission circulates and is discussed in the public sphere. Much of the public debate over digital contact tracing apps, rapidly unfolding in Europe, has so far focused on individual privacy, and on whether it can be protected with technical solutions. These are important questions, but it sidesteps the harder problems linked to widespread stigma and blame. In some countries, states now impose criminal sanctions on transmission of the coronavirus, though UNAIDS warns, based on experience in the HIV epidemic, that criminal sanctions will undermine, not help the response. Even anonymized data raises the risk of persecution once it circulates in a climate of fear and stigma.
Contact tracing is a classic public health intervention often used successfully in epidemic control; for instance, in the case of Ebola. It involves trained health care personnel interviewing an individual (an “index case” known to have the virus) to identify that person’s movements during the time when that person was infectious, and other people who may have been exposed. The health care worker then directly, and privately, contacts any individuals at risk to encourage them to test and take steps to prevent transmitting the virus again. The data is, or should be, protected by strict rules on medical confidentiality; though despite these, there are well-documented problems of health sector discrimination against people living with HIV. The stubborn persistence of these forms of medical discrimination, more than 30 years into the history of the HIV epidemic, should cause some concern about how such data may fare in the wider public.
Digital apps offer the enticing possibility of doing this contact-tracing work in real time and on a much larger scale. As part of their responses to the COVID-19 outbreak, China, South Korea, and Singapore are using apps that employ various combinations of GPS, Bluetooth (which exchanges signals between two mobile phones within a certain distance range), and wifi signals to locate individuals and alert those who may have been in contact with confirmed COVID-19 cases. In China, technology has integrated artificial intelligence with infrared thermal technology to detect temperatures and facial recognition software to identify individuals at risk; facial recognition cameras are widespread in public places there.
Other countries—including the UK, Switzerland, and members of the European Union—are now moving quickly to develop their own digital contact tracing applications. European countries are favoring Bluetooth-based “handshakes” between mobile devices, some preferring a centralized approach (with data made accessible to health care personnel), while others opt for a decentralized approach. Google and Apple have joined forces to build Bluetooth-enabled contact tracing in billions of phones globally; while they have committed to maintaining “strong protections around user privacy”, observers argue it may still be possible to infer the likely source of a given exposure.
The specifics of the technology can significantly shape the risks, but setting these specifics aside for a moment, there are three concerns that arise as we consider how the speed and scale of mobile apps might exacerbate the risks that already inhere in contact tracing.
First, as the epidemic has triggered fear and stigma, as well as new laws criminalizing transmission, if even anonymized data gets into the public domain, members of the public will draw inferences—whether correct or mistaken—in an effort to pinpoint blame. South Korea’s Coronamap website shows the travel histories of anonymous confirmed patients, identifying them only by gender and age; text messages are sent to individuals to warn them of specific contacts and their movements. But as even this limited information has circulated in public, individuals in South Korea have been accused of infidelity, fraud, sex work, and there have been online witch hunts to track down individuals blamed for spreading the virus.
These kinds of accusations could create serious risks for women and girls in the context of gender inequality and violence against women in many countries. UN human rights experts and the World Health Organization (WHO) have warned that the COVID-19 crisis may exacerbate intimate partner violence, because distancing measures, school closures, and the economic downturn increase family stress while isolating victims from family, friends, and social networks, and hiding abuses from view. General Comment No. 14 on the Right to Highest Attainable Standard of Health, the authoritative interpretation of the human right to health, calls on states to integrate a gender perspective in health-related policies, planning, programmes, and research. Health and movement information that triggers speculation about women’s activities by their families, partners, or neighbors, could expose those women to discrimination and violence.
Similarly, publishing location data about COVID-19 outbreaks, which will now be available on a significantly larger scale thanks to digital contact tracing, may intensify stigmatization and blame towards specific minority groups. The COVID-19 crisis has already heightened xenophobia, racism, and religious tensions. For example, dozens of Africans living in Guangzhou, China have reported being evicted from their homes and other discriminatory treatment because of a mistaken association with COVID-19 transmission. People of Chinese and other Asian descent, Roma people, and Hispanics have reported violence and verbal abuse linked to fears and angers about the virus. Muslims have been attacked in India after a mass gathering of Tablighi Jamaat was linked to nearly one-third of India’s coronavirus cases.
In South Korea, individual businesses were associated with COVID-19 transmission after they were identified through contact tracing, and some were targeted for extortion. If digital apps begin to accelerate the pinpointing of outbreaks in specific neighborhoods, communities, or religious groups, it could lead to further stigma or even violence against those groups. It is concerns like these that have led WHO to call on states to put in place “special measures…to ensure protection from discrimination and to ensure access to information, social services, health care, social inclusion, and education for vulnerable groups in national COVID-19 responses”.
These problems have already arisen in the global HIV response. Groups whose behaviors are criminalized and stigmatized face increased risks in health surveillance and research: studies that mapped sex workers to target HIV services to them have exposed that population to arrest. As Allan Maleche and I described in this journal, Kenyan key populations also vehemently opposed biometric data-gathering (such as iris scans or fingerprints) out of fears of exposure and arrest.While this has been a longstanding concern in traditional contact tracing, digital apps will take data normally managed by a small number of health care workers, and make it far more widely available for public discussion.
There are groups that will avoid use of contact tracing apps as a result of these risks—the uncounted, who tend to hide from state scrutiny. In many countries, undocumented migrants and others whose identities or behavior place them in legal limbo will likely go to great lengths to avoid having their data captured for fear of identification, arrest, and expulsion; the same populations are most likely to be vulnerable to COVID-19, due to crowded housing and lack of access to water and health information. In Singapore, for example, the widely-praised and digitized COVID-19 response was undone in part because of a failure to capture and meet the needs of hundreds of migrant workers living in cramped dormitories. Another group that may hide from digital scrutiny are the elderly, who may be reluctant to come forward out of fears of not surviving discriminatory triage in hospitals, or out of fears of being placed in nursing homes where there have now been numerous hidden deaths. As I discuss in my forthcoming book, The Uncounted, populations that are criminalized and stigmatized (such as sex workers, people who use drugs, or LGBT people) have often similarly avoided being counted or identified in HIV studies out of fear of arrest. This can create a data paradox in which lack of data results in lack of resource allocation to health services, reinforcing the lack of data.
Overcoming these challenges requires states to build trust through upholding fundamental human rights principles of transparency and accountability. States preparing to embrace digital contact tracing must clearly articulate who owns the data, where that data is stored, for how long, and for what purpose. Who has the right to use this data to make decisions, and who is accountable for algorithmic decision-making? What measures will be taken to protect women and girls, as well as stigmatized groups? Will there be a right of appeal in cases where an individual is wrongly tagged as a COVID-19 case, as happened in China and elsewhere? States may restrict certain rights during an emergency, but under the Siracusa Principles, these must be “provided for by law, strictly necessary, proportionate, of limited duration, and subject to review”, and currently many countries lack even basic data protection laws.
Health data is not neutral: it is embedded in political contexts, can be shaped by politics, and its collection and use in decision-making has life-or-death effects. While we are all desperate for solutions to the COVID-19 crisis, history, including decades of the HIV response, has shown that addressing epidemics requires thoughtful consideration for how the rights of those most marginalized undermines their participation in the programmes and strategies devised for the health of all.
Sara L.M. Davis, is Senior Fellow, Graduate Institute, Geneva, Switzerland. Email: email@example.com
 N. Lomas, “Europe’s PEPP-PT COVID-19 Contacts Tracing Standard Push Could be Squaring Up for a Fight with Apple and Google”, TechCrunch (April 17, 2020). Available at https://techcrunch.com/2020/04/17/europes-pepp-pt-covid-19-contacts-tracing-standard-push-could-be-squaring-up-for-a-fight-with-apple-and-google/amp/?guce_referrer=aHR0cHM6Ly90LmNvL3JVVXpYVXYyaG0_YW1wPTE&guce_referrer_sig=AQAAAGX4lJuYDseN-TwzcoE95X4SfpbpPmVM7frDBUcFnl20RUiShm36J9snY7ItMUnXw8JvE5WPTEyOGefHx-asHFA1Xe-1-8B9_YXKMf1DaqHwisMsGQ7X8mbtQVi5WaD0AOIK9zTxoAuC7SvUer3Iwgr2hSoF7-h2s_bu3O1WM2ya&guccounter=2.
 N. Sun and L. Zilli, “COVID-19 Symposium: The Use of Criminal Sanctions in COVID-19 Responses – Exposure and Transmission, Part I”. Opinio Juris (April 3, 2020); UNAIDS, Rights in the Time of COVID-19: Lessons from HIV for an Effective, Community-led Response, report (March 20, 2020). Available at https://www.unaids.org/en/resources/presscentre/pressreleaseandstatementarchive/2020/march/20200320_human-rights-approach-covid-19.
 World Health Organization and Centers for Disease Control, Implementation and Management of Contact Tracing for Ebola Virus Disease (September 2015). Available at https://www.who.int/csr/resources/publications/ebola/contact-tracing/en/.
 Asia Catalyst, First Do No Harm: Discrimination in Health Care Settings Against People Living with HIV in Cambodia, China, Myanmar and Viet Nam (March 2016). Available at https://asiacatalyst.org/wp-content/uploads/2014/09/First-Do-No-Harm_Feb26.pdf; PLHIV Stigma Index, web site (April 2020). Available at https://www.stigmaindex.org.
 “Help Speed Up Contact Tracing with TraceTogether”, GOV.SG (March 21, 2020). Available at https://www.gov.sg/article/help-speed-up-contact-tracing-with-tracetogether; Y. Huang, M. Sun and Y Sui, “How Digital Contact Tracing Slowed COVID-19 in East Asia”, Harvard Business Review (April 15, 2020). Available at https://hbr.org/2020/04/how-digital-contact-tracing-slowed-covid-19-in-east-asia?fbclid=IwAR2co2xcEY3M68kk3qO7ht_fOsIU09XyjW8qlyY_krNFEJLyF8XFX9hYskI.
 “Contact Tracing App Could Be Launched in Switzerland Within Weeks”, Swissinfo.ch (April 21, 2020). Available at https://www.swissinfo.ch/eng/digital-solution_contact-tracing-app-could-be-launched-in-switzerland-within-weeks/45706296.
 “Apple and Google Partner on COVID-19 Contact Tracing Technology”, Apple.com (April 10, 2020). Available at https://www.apple.com/newsroom/2020/04/apple-and-google-partner-on-covid-19-contact-tracing-technology/; R. Brandom, “Answering the 12 Biggest Questions About Apple and Google’s New Coronavirus Tracking Project,” The Verge (April 11, 2020). Available at https://www.theverge.com/2020/4/11/21216803/apple-google-coronavirus-tracking-app-covid-bluetooth-secure.
 N. Kim, “’More Scary Than Coronavirus’, South Korea’s Health Alerts Expose Private Lives”, The Guardian (March 6, 2020). Available at https://www.theguardian.com/world/2020/mar/06/more-scary-than-coronavirus-south-koreas-health-alerts-expose-private-lives.
 UN Office of the High Commissioner for Human Rights, “States Must Combat Domestic Violence in the Context of COVID-19 Lockdowns – UN Rights Expert”, press statement (March 20, 2020). Available at https://www.ohchr.org/EN/NewsEvents/Pages/DisplayNews.aspx?NewsID=25749&LangID=E; World Health Organization, “COVID-19 and Violence Against Women: What the Health Sector/System Can Do”, fact sheet (April 7, 2020). Available at https://apps.who.int/iris/bitstream/handle/10665/331699/WHO-SRH-20.04-eng.pdf.
 UN Committee on Economic, Social and Cultural Rights, General Comment No. 14 (2000): The Right to the Highest Attainable Standard of Health, E/C.12/2000/4 (August 11, 2000), para. 19. Available at http://docstore.ohchr.org/SelfServices/FilesHandler.ashx?enc=4slQ6QSmlBEDzFEovLCuW1AVC1NkPsgUedPlF1vfPMJ2c7ey6PAz2qaojTzDJmC0y%2B9t%2BsAtGDNzdEqA6SuP2r0w%2F6sVBGTpvTSCbiOr4XVFTqhQY65auTFbQRPWNDxL.
 J. Marsh, S. Deng and N. Gan, “Africans in Guangzhou Are on Edge, After Many Are Left Homeless Amid Rising Xenophobia as China Fights a Second Wave of Coronavirus,” CNN (April 13, 2020). Available at https://edition.cnn.com/2020/04/10/china/africans-guangzhou-china-coronavirus-hnk-intl/index.html.
 S. Yasir, “India is Scapegoating Muslims for the Spread of the Coronavirus,” Foreign Policy (April 22, 2020). Available at https://foreignpolicy.com/2020/04/22/india-muslims-coronavirus-scapegoat-modi-hindu-nationalism/.
 World Health Organization, “Addressing Human Rights as Key to the COVID-19 Response”, fact sheet (April 21, 2020). Available at https://www.who.int/publications-detail/addressing-human-rights-as-key-to-the-covid-19-response.
 Global Network of Sex Work Projects, Mapping and Population Size Estimates of Sex Workers: Proceed with Extreme Caution, policy brief (November 2015). Available at https://www.nswp.org/resource/mapping-and-population-size-estimates-sex-workers-proceed-extreme-caution.
 Sara L.M. Davis and Allan Maleche, “’Everyone Said No’: Key Populations and Biometrics in Kenya”, Health and Human Rights Journal blog (July 4, 2018). Available at https://www.hhrjournal.org/2018/07/everyone-said-no-key-populations-and-biometrics-in-kenya/.
 Sara L.M. Davis, The Uncounted: Politics of Data in Global Health, Cambridge University Press (2020). Available at https://www.cambridge.org/core/books/uncounted/C0CC81C0F03D1822D05C13EE31FA0957.
 R. Ratcliffe, “Singapore’s Cramped Migrant Worker Dorms Hide COVID-19 Surge Risk”, The Guardian (April 17, 2020). Available at https://www.theguardian.com/world/2020/apr/17/singapores-cramped-migrant-worker-dorms-hide-covid-19-surge-risk.
 D. Popescu and A. Marcoci, “Coronavirus: allocating ICU beds and ventilators based on age is discriminatory”, The Conversation (April 22, 2020). Available at https://theconversation.com/coronavirus-allocating-icu-beds-and-ventilators-based-on-age-is-discriminatory-136459; J. Shapiro, J. Huo, R. Benincasa, “In New York Nursing Homes, Death Comes to Facilities with More People of Color”, NPR (April 22, 2020). Available at https://www.npr.org/2020/04/22/841463120/in-new-york-nursing-homes-death-comes-to-facilities-with-more-people-of-color.
 Davis, The Uncounted.
 P. Mozur, R. Zhong and A. Krolik, “In Coronavirus Fight, China Gives Citizens a Color Code, With Red Flags”, The New York Times (March 1, 2020). Available at https://www.nytimes.com/2020/03/01/business/china-coronavirus-surveillance.html.
 N. Sun, “Applying Siracusa: A Call for a General Comment on Public Health Emergencies”, Health and Human Rights Journal (April 23, 2020). Available at https://www.hhrjournal.org/2020/04/applying-siracusa-a-call-for-a-general-comment-on-public-health-emergencies/; G. Greenleaf, Global Data Privacy Laws 2019: 132 National Laws and Many Bills”, Privacy Laws & Business International Report 157 (2019): 14-18. Available at: https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3381593.