Publication: Tuesday 20th April
PDF: Covid-19 Contact Tracing How Should Policy Proceed?
Now that the contact tracing app, NHSX has been delayed until June, ministers should seize the moment to change app, says Anthony Speaight QC. In doing so they would avoid a ‘mare’s nest’ of legal problems and protecting important freedoms under law.
In Politeia’s new analysis, Covid-19 Contact Tracing: How Should Policy Proceed?, he explains that, apart from the technical problems, using the centralized NHSX state app. raises serious legal concerns. There is no guarantee that it will be compatible with other countries’ contact tracing apps, or that the scientific evidence it will gather will be of value. Moreover, it opens the prospect of state controls over people’s daily lives, intrusive interventions and violations of our fundamental freedoms. Instead of NHSX, the UK, should use the decentralized schemes preferred by Germany, Switzerland and Austria.
Speaight sets out three main reasons for concern with the NHSX app and the centralised system intended:
- The creation of a centralized system offers the potential for a ‘mission creep’ into a wider apparatus of public health surveillance. There are indications that NHSX would be interested in expanding the information collected beyond that in the Isle of Wight pilot.
- NHSX may not comply with data protection law and is open to challenges under existing rules and the proposed replacement in 2021, GDPR UK. There are difficulties for it to pass either of the gateways to permissible processing of personal data — consent and public interest.
- Consent must be “freely given, specific, informed and unambiguous indication of the data subject’s wishes”; it must be for a specific purpose and it should be as easy to withdraw as to give.
- Public interest is a matter of use being ‘strictly necessary’ (Lord Kerr in the Supreme Court) and proportionate: if a less intrusive measure did not unacceptably compromise the objective, it should have been adopted) The fact that the Apple/Google scheme could have been adopted, says Speaight, suggests a challenge would have teeth.
- The practical difficulties could be insurmountable, e.g. insecurity and incompatibility with other countries’ systems. Germany, Switzerland, Austria and Ireland intend to use a decentralized system, thinking in the USA is inclining the same way.
The author concludes that the reasons for moving to other options are strong. The parliamentary All Party Committee on Human Rights has advised against ‘rolling out’ the NHSX app until there is legal assurance on privacy, a Digital Contact Tracing Commissioner to oversee it, the highest standards of data security, and for the deletion of all data at the latest after 2 years. The government could adopt the draft Bill prepared by Professor Lillian Edwards of Newcastle University leading a team of academics from eight universities. But officials have given no cast iron assurances on the potential use of data or privacy.
As Mr Speaight concludes:
All in all, the NHS app is an unnecessary mare’s nest of problems. Our heritage leans heavily against a powerful or all-knowing state. For example, Britain is a country, which unlike most of our European neighbours, has always resisted identity cards in peacetime. A centralised contact tracing app may reflect the centralised organisation of the NHS, but it fits ill with the deeper political culture of our nation. If to be deployed at all, it must be delayed until safeguards, such as those in the Edwards draft Bill have been enacted. But the better course will be to abandon NHSX, and in common with most of the rest of the Western world use the safety of a decentralised tracing model.
Covid-19 Contact Tracing: How Should Policy Proceed is published by Politeia, 14a Eccleston Street, SW1 W9LT.
The Author: Anthony Speaight QC is a barrister at 4 Pump Court. He was a member of the Government Commission on a UK Bill of Rights, and a past Vice-Chairman of the Bar Council’s IT pane. He is Chair of Research of the Society of Conservative Lawyers.
The Author: ASpeaight@4pumpcourt.com
Politeia: email@example.com, 0207 799 5034