Applied Ethics and Digital Information Privacy: Informing the Design of Covid-19 Contact Tracing Apps
DOI:
https://doi.org/10.3127/ajis.v26i0.3097Keywords:
applied ethics, disclosive computer ethics, information privacy, moblie app, contact tracing, coronavirus, Covid-19, crisis, pandemic, normative theoryAbstract
To counteract the spread of Covid-19, many countries have introduced mobile applications for contact tracing, which raises considerable questions about how these apps protect users’ information privacy. Through an exploratory analysis of Covid-19 contact tracing apps being used in Australia, France, Germany, Japan, and New Zealand, we identify normative and technical principles for the design of privacy-sensitive contact tracing apps. Based on a Restricted Access/Limited Control (RALC) account of information privacy, we discuss how the apps protect users’ information privacy through limiting access to and allowing users to actively manage their personal information. Our findings illustrate what understanding of information privacy is evident from the various designs of Covid-19 contact tracing apps, and how competing design principles can contribute to users’ information privacy. From a practical perspective, our findings can inform the design of contact tracing apps and the development of privacy approaches that can be applied in particular contexts. Our work thus bridges the gap between ethical design guidelines and technical analyses of specific implementations.
References
Ahmed, N., Michelin, R. A., Xue, W., Ruj, S., Malaney, R., Kanhere, S. S., Jha, S. K. (2020). A Survey of COVID-19 Contact Tracing Apps. IEEE Access, 8, 134577–134601. https://doi.org/10.1109/ACCESS.2020.3010226
Australian Government (2020). Privacy Policy. Retrieved from https://covidsafe.gov.au/privacy-policy.html*, accessed on 11th July 2020.
Australian Government Department of Health (2020). COVIDSafe App. Retrieved from https://www.health.gov.au/resources/apps-and-tools/covidsafe-app#get-th*, accessed on 11th July 2020.
Becker, M. (2019). Privacy in the digital age: comparing and contrasting individual versus social approaches towards privacy. Ethics and Information Technology, 21(4), 307–317. https://doi.org/10.1007/s10676-019-09508-z
Bélanger, F., & Crossler, R. E. (2011). Privacy in the Digital Age: A Review of Information Privacy Research in Information Systems. MISQuarterly, 35(4), 1017–1041.
Blasimme, A., & Vayena, E. (2020). What's next for COVID-19 apps? Governance and oversight. Science (New York, N.Y.), 370(6518), 760–762. https://doi.org/10.1126/science.abd9006
Boutet, A., Bielova, N., Castelluccia, C., Cunche, M.: Lauradoux, C., Le Métayer, D., & Roca, V. (2020). Proximity Tracing Approaches - Comparative Impact Analysis. Retrieved from https://hal.inria.fr/hal-02570676v1*, accessed on 20th August 2020.
Brey, P. (2000a). Disclosive Computer Ethics. ACM SIGCAS Computers and Society, 30(4), 10–16. https://doi.org/10.1145/572260.572264
Brey, P. (2000b). Method in Computer Ethics: Towards a Multi-Level Interdisciplinary Approach. Ethics and Information Technology, 2(2), 125–129. https://doi.org/10.1023/A:1010076000182
Budd, J., Miller, B. S., Manning, E. M., Lampos, V., Zhuang, M., Edelstein, M., . . . McKendry, R. A. (2020). Digital technologies in the public-health response to COVID-19. Nature Medicine, 26(8), 1183–1192. https://doi.org/10.1038/s41591-020-1011-4
Campbell, J. E., & Carlson, M. (2002). Panopticon.com: Online Surveillance and the Commodification of Privacy. Journal of Broadcasting & Electronic Media, 46(4), 586–606. https://doi.org/10.1207/s15506878jobem4604_6
Chan, E. Y., & Saqib, N. U. (2021). Privacy concerns can explain unwillingness to download and use contact tracing apps when COVID-19 concerns are high. Computers in Human Behavior, 119, 106718. https://doi.org/10.1016/j.chb.2021.106718
Chaos Computer Club (2020). CCC hackt digitale "Corona-Listen". Retrieved from https://www.ccc.de/de/updates/2020/digitale-corona-listen/*, accessed on 29th August 2020.
Clarke, R. (1999). Internet Privacy Concerns Confirm the Case for Intervention. Communications of the ACM, 42(2), 60–67. https://doi.org/10.1145/293411.293475
Clarke, R. (2019). Risks Inherent in the Digital Surveillance Economy: A Research Agenda. Journal of Information Technology, 34(1), 59–80. https://doi.org/10.1177/0268396218815559
Corona Warn App Open Source Project (2020). Frequently Asked Questions about the Corona-Warn-App. Retrieved from https://www.coronawarn.app/en/faq/*, accessed on 29th June 2020.
Di Gennaro, F., Pizzol, D., Marotta, C., Antunes, M., Racalbuto, V., Veronese, N., & Smith, L. (2020). Coronavirus Diseases (COVID-19) Current Status and Future Perspectives: A Narrative Review. International Journal of Environmental Research and Public Health, 17(8). https://doi.org/10.3390/ijerph17082690
European Commission (2020). COMMUNICATION FROM THE COMMISSION: Guidance on Apps supporting the fight against COVID 19 pandemic in relation to data. Retrieved from https://ec.europa.eu/info/sites/default/files/5_en_act_part1_v3.pdf*, accessed on.
European Parliament (2020). Covid-19 tracing apps: ensuring privacy and use across borders, accessed on November 5, 2020.
The Federal Government (2020a). The Corona-Warn-App: Helps us Fight the Coronavirus. Retrieved from https://www.bundesregierung.de/breg-de/themen/corona-warn-app/corona-warn-app-englisch*, accessed on 29th June 2020.
The Federal Government (2020b). Frequently Asked Questions. Retrieved from https://www.bundesregierung.de/breg-de/themen/corona-warn-app/corona-warn-app-englisch/corona-warn-app-faq-1758636*, accessed on 29th June 2020.
Fischer, D., Hattori-Putzke, J., & Fischbach, K. (2019). Crisis Warning Apps: Investigating the Factors Influencing Usage and Compliance with Recommendations for Action. In Proceedings of the Hawai'i International Conference on System Science.
Floridi, L. (2006). Four Challenges for a Theory of Informational Privacy. Ethics and Information Technology, 8(3), 109–119. https://doi.org/10.1007/s10676-006-9121-3
Floridi, L. (2020). Mind the App-Considerations on the Ethical Risks of COVID-19 Apps. Philosophy & Technology, 1–6. https://doi.org/10.1007/s13347-020-00408-5
Fodor, M., & Brem, A. (2015). Do privacy concerns matter for Millennials? Results from an empirical analysis of Location-Based Services adoption in Germany. Computers in Human Behavior, 53(2), 344–353. https://doi.org/10.1016/j.chb.2015.06.048
Hatamian, M., Wairimu, S., Momen, N., & Fritsch, L. (2021). A privacy and security analysis of early-deployed COVID-19 contact tracing Android apps. Empirical Software Engineering, 26(3), 36. https://doi.org/10.1007/s10664-020-09934-4
Inria (2020a). FAQ on the Technical Aspects of the StopCovid Application. Retrieved from https://www.inria.fr/en/faq-technical-aspects-stopcovid-application*, accessed on 3rd July 2020.
Inria (2020b). StopCovid Inria Press Release. Retrieved from https://www.inria.fr/en/stopcovid*, accessed on 3rd August 2020.
Inria (2020c). The StopCovid Project-Team Starts Publishing the Source Code and Documentation of the StopCovid Application. Retrieved from https://www.inria.fr/en/stopcovid-source-code*, accessed on 3rd August 2020.
Ishmaev, G., Dennis, M., & van den Hoven, M. J. (2021). Ethics in the COVID-19 pandemic: Myths, false dilemmas, and moral overload. Ethics and Information Technology, 1–16. https://doi.org/10.1007/s10676-020-09568-6
Klar, R., & Lanzerath, D. (2020). The Ethics of COVID-19 Tracking Apps – Challenges and Voluntariness. Research Ethics, 1-9. https://doi.org/10.1177/1747016120943622
Kolasa, K., Mazzi, F., Leszczuk-Czubkowska, E., Zrubka, Z., & Péntek, M. (2021). State of the Art in Adoption of Contact Tracing Apps and Recommendations Regarding Privacy Protection and Public Health: Systematic Review. JMIR MHealth and UHealth, 9(6), e23250. https://doi.org/10.2196/23250
Lowry, P. B., Dinev, T. [Tamara], & Willison, R. (2017). Why Security and Privacy Research Lies at the Centre of the Information Systems (IS) Artefact: Proposing a Bold Research agenda. European Journal of Information Systems, 26(6), 546–563. https://doi.org/10.1057/s41303-017-0066-x
Ministére De L'économie des Finances et de la Relance (2020a). FAQ StopCovid. Retrieved from https://www.economie.gouv.fr/stopcovid-faq*, accessed on 3rd July 2020.
Ministére De L'économie des Finances et de la Relance (2020b). https://www.economie.gouv.fr/stopcovid. Retrieved from https://
www.economie.gouv.fr/stopcovid#*, accessed on 3rd July 2020.
Ministry of Health (2020a). NZ COVID Tracer App. Retrieved from https://www.health.govt.nz/our-work/diseases-and-conditions/covid-19-novel-coronavirus/covid-19-novel-coronavirus-resources-and-tools/nz-covid-tracer-app*, accessed on 31st July 2020.
Ministry of Health (2020b). Questions and Answers on NZ COVID Tracer. Retrieved from https://www.health.govt.nz/our-work/diseases-and-conditions/covid-19-novel-coronavirus/covid-19-novel-coronavirus-resources-and-tools/nz-covid-tracer-app/questions-and-answers-nz-covid-tracer*, accessed on 31st July 2020.
Ministry of Health, Labour and Welfare (2020a). Contact Confirmation Application Privacy Policy. Retrieved from
https://www.mhlw.go.jp/stf/seisakunitsuite/english_pp_00032.html*, accessed on 31st July 2020.
Ministry of Health, Labour and Welfare (2020b). Q & A for Users of the Contact Tracing App. Retrieved from
https://www.mhlw.go.jp/stf/seisakunitsuite/bunya/kenkou_iryou/covid19_qa_kanrenkigyou_00009.html*, accessed on 31st July 2020.
Moor, J. H. (1997). Towards a Theory of Privacy in the Information Age. ACM SIGCAS Computers and Society, 27(3), 27–32. https://doi.org/10.1145/270858.270866
Morley, J., Cowls, J., Taddeo, M., & Floridi, L. (2020). Ethical guidelines for COVID-19 tracing apps. Nature, 582(7810), 29–31. https://doi.org/10.1038/d41586-020-01578-0
Nissenbaum, H. (1998). Protecting Privacy in an Information Age: The Problem of Privacy in Public. Law and Philosophy, 17(5/6), 559. https://doi.org/10.2307/3505189
Pan, A., Liu, L., Wang, C., Guo, H., Hao, X., Wang, Q., . . . Wu, T. (2020). Association of Public Health Interventions With the Epidemiology of the COVID-19 Outbreak in Wuhan, China. JAMA, 323(19), 1915–1923. https://doi.org/10.1001/jama.2020.6130
Parent, W. A. (1983). Privacy, Morality, and the Law. Philosophy & Public Affairs, 12(4), 269–288. Retrieved from http://www.jstor.org/stable/2265374
Popovič, A., Smith, H. J., Thong, J. Y. L., & Wattal, S. (2017). MIS Quarterly Research Curation on Information Privacy. MIS Quarterly, Updated: June 2018; August 2019.
Repucci, S., & O'Toole, S. (2020). Freedom in the World 2020: The Annual Survey of Political Rights & Civil Liberties. New York, NY, Washington, DC and Lanham, Boulder, New York, London: Freedom House and Rowman & Littlefield.
Rowe, F. (2020). Contact Tracing Apps and Values Dilemmas: A Privacy Paradox in a Neo-Liberal World. International Journal of Information Management, 102178. https://doi.org/10.1016/j.ijinfomgt.2020.102178
Sharma, T., & Bashir, M. (2020). Use of apps in the COVID-19 response and the loss of privacy protection. Nature Medicine, 26(8), 1165–1167. https://doi.org/10.1038/s41591-020-0928-y
Smith, H. J., Dinev, T. [T.], & Xu, H. (2011). Information Privacy Research: An Interdisciplinary Review. MIS Quarterly, 35(4), 989. https://doi.org/10.2307/41409970
Solove, D. J. (2006). A Taxonomy of Privacy. University of Pennsylvania Law Review, 154(3), 477. https://doi.org/10.2307/40041279
Stahl, B. C. (2019). Teaching Ethical Reflexivity in Information Systems: How to Equip Students to Deal With Moral and Ethical Issues of Emerging Information and Communication Technologies. Ournal of Information Systems Education, 22(3), 253–260.
Stahl, B. C. (2012). Morality, Ethics, and Reflection: A Categorization of Normative IS Research. Journal of the Association for Information Systems, 13(8), 636–656. https://doi.org/10.17705/1jais.00304
Taddeo, M. (2020). The Ethical Governance of the Digital During and After the COVID-19 Pandemic. Minds and Machines, 1–6. https://doi.org/10.1007/s11023-020-09528-5
Tavani, H. T. (2007). Philosophical Theories of Privacy: Implications for an Adequate Online Privacy Policy. Metaphilosophy, 38(1), 1–22. https://doi.org/10.1111/j.1467-9973.2006.00474.x
Tavani, H. T. (2008). Informational Privacy: Concepts, Theories, and Controversies. In K. E. Himma & H. T. Tavani (Eds.), The Handbook of Information and Computer Ethics (pp. 131–164). Hoboken, N.J: Wiley. https://doi.org/10.1002/9780470281819.ch6
Tavani, H. T., & Moor, J. H. (2001). Privacy Protection, Control of Information, and Privacy-Enhancing Technologies. ACM SIGCAS Computers and Society, 31(1), 6–11. https://doi.org/10.1145/572277.572278
Trang, S., Trenz, M., Weiger, W. H., Tarafdar, M., & Cheung, C. M.K. (2020). One App to Trace Them All? Examining App Specifications for Mass Acceptance of Contact-Tracing Apps. European Journal of Information Systems, 94(1), 1–14. https://doi.org/10.1080/0960085X.2020.1784046
Volokh, E. (2000). Personalization and Privacy. Communications of the ACM, 43(8), 84–88. https://doi.org/10.1145/345124.345155
WHO (2020). Ethical considerations to guide the use of digital proximity tracking technologies for COVID-19 contact tracing. Retrieved from
https://www.who.int/publications/i/item/WHO-2019-nCoV-Ethics_Contact_tracing_apps-2020.1
WHO (2021a). Contact tracing in the context of COVID-19. Retrieved from https://www.who.int/publications/i/item/contact-tracing-in-the-context-of-covid-19*, accessed on.
WHO (2021b). COVID-19 Strategic Preparedness and Response Plan (SPRP 2021). Retrieved from https://www.who.int/publications/i/item/WHO-WHE-2021.02*, accessed on November 27th, 2021.
Woodhams, S. (2020). COVID-19 Digital Rights Tracker. Retrieved from https://www.top10vpn.com/research/covid-19-digital-rights-tracker/*, accessed on November 5, 2021.
Zastrow, M. (2021). Coronavirus contact-tracing apps: can they slow the spread of COVID-19? Retrieved from https://www.nature.com/articles/d41586-020-01514-2*, accessed on October 26, 2021.
Zhang, M., Chow, A., & Smith, H. [Helen] (2020). Covid-19 Contact-Tracing Apps: Analysis of the Readability of Privacy Policies. Journal of Medical Internet Research, 22(12), e21572. https://doi.org/10.2196/21572
Downloads
Published
How to Cite
Issue
Section
License
AJIS publishes open-access articles distributed under the terms of a Creative Commons Non-Commercial and Attribution License which permits non-commercial use, distribution, and reproduction in any medium, provided the original author and AJIS are credited. All other rights including granting permissions beyond those in the above license remain the property of the author(s).
