New Zealanders are being asked to share their personal contact details at each potential location where contract tracing made be needed for Covid 19 coronavirus. Photo / Janine Baalbergen, file
New Zealanders are being asked to share their personal contact details at each potential location where contract tracing made be needed for Covid 19 coronavirus. Photo / Janine Baalbergen, file
COMMENT
Strangely, the Government is making glacial progress on a nationwide digital contact tracing solution while at the same time requiring "DIY" contact-tracing data collection by almost every business and organisation in the land.
Progress on the nationwide app to support contact-tracing has had all the forward momentum of a car with the handbrake applied, but the Government has justified that with the need to address concerns about data sensitivity, privacy, and accuracy. Nonetheless, it has been quick to delegate the collection of contact-tracing information to thousands of New Zealand organisations, requiring them to collect details of all employees, visitors, and customers in order to operate at Level 2.
Many of those organisations are less than ready to handle and protect sensitive and private data and are already labouring under weighty burdens imposed by Covid-19 but have pretty much been told to "get it done".
So, what do cafes, councils and construction companies do when told they must find a way to collect details that a public health unit could use for contact tracing? Solutions range from the rudimentary pen and paper suggested by Worksafe, through to a multitude of apps and databases flooding the market.
Even a basic "sign-in register" is far from harmless, with the risk of catching Covid-19 from a ballpoint pen the least scary part. The recent case of an Auckland woman whose details were misused by a restaurant worker shows just why we should worry about who can see our information. But we should also think about what will happen to tens of thousands of pieces of paper, excel spreadsheets and rich databases full of our personal data in the long term.
The fact is, our data will be held with varying degrees of security and used in ways that range from trustworthy to reckless.
Chances are a developer has already sold a shiny contact tracing/marketing/customer insight solution to your local café, pool, or retail store. It might be an add-on to an existing system or a completely new way to collect data. Regardless of how they work (and you will possibly never know) you will be feeding your details into these myriad contact tracing solutions multiple times a day, because that is the price of doing your everyday business.
One app I used this morning to order my coffee explicitly states that it can track my location and use my data for "analytics". The Government has just handed this app company a database which it could only have dreamed about – who buys what, when and where?
So, our details will end up in multiple "DIY" contact tracing systems every day, and we will have variable comfort about what will happen to that information in the short and long term.
Contact-tracing solutions that could be in use for months are not governed by much in the way of clear standards or oversight, save brief guidelines from Government and specific advice for hospitality businesses from the Privacy Commissioner. The better operators will only keep our data for the allowable two months and act as trustworthy guardians but many will not or cannot.
Most of us understand the benefits of data use, but we have key questions we would like answered before we are comfortable sharing personal information. In 2016, I was part of the Data Futures Working group that conducted workshops on how comfortable New Zealanders were about sharing their data. The bottom line, reflected in the Draft Guidelines for Trusted Data Use (2017), is most New Zealanders wanted to know how sharing their data would benefit them, their community, and whānau. They also wanted to know how their data would be kept secure.
Neither of these questions have been answered by the Government. We have no information as to how sharing our personal details with all and sundry will improve the efficacy of manual tracing. Exactly how does "outsourcing" the contact tracing to businesses and organisations help us manage the next Covid-19 wave? We are expected to trust this fragmented data collection programme, with no evidence our trust is well placed.
While Government has shown great concern for issues of data privacy and trust (and rejected mandatory participation) in the development of its own app, it has seemingly suspended those concerns when requiring businesses and organisations to act on its behalf in Level 2.
New Zealanders must either make their own assessment of each contact tracing system put in front of them to decide whether they trust it, or just hope for the best.
Rhema Vaithianathan. Photo / supplied
It is not clear whether Government's digital contact tracing solution will arrive in time to replace the fragmented situation that is emerging. But the loss of trust created by a slow and contradictory approach to digital contact tracing will take some time to rectify.
• Professor Rhema Vaithianathan is the Director of the Centre for Social Data Analytics at Auckland University of Technology and was a member of the NZ Government Data Futures Working Group 2016-2018
