As Coronavirus Surveillance Escalates, Personal Privacy Plummets - The New York Times
►https://www.nytimes.com/2020/03/23/technology/coronavirus-surveillance-tracking-privacy.html
As countries around the world race to contain the pandemic, many are deploying digital surveillance tools as a means to exert social control, even turning security agency technologies on their own civilians. Health and law enforcement authorities are understandably eager to employ every tool at their disposal to try to hinder the virus — even as the surveillance efforts threaten to alter the precarious balance between public safety and personal privacy on a global scale.
Yet ratcheting up surveillance to combat the pandemic now could permanently open the doors to more invasive forms of snooping later. It is a lesson Americans learned after the terrorist attacks of Sept. 11, 2001, civil liberties experts say.
Nearly two decades later, law enforcement agencies have access to higher-powered surveillance systems, like fine-grained location tracking and facial recognition — technologies that may be repurposed to further political agendas like anti-immigration policies. Civil liberties experts warn that the public has little recourse to challenge these digital exercises of state power.
“That could extend to anyone, to suddenly have the status of your health blasted out to thousands or potentially millions of people,” said Chris Gilliard, an independent privacy scholar based in the Detroit area. “It’s a very strange thing to do because, in the alleged interest of public health, you are actually endangering people.”
But in emergencies like pandemics, privacy must be weighed against other considerations, like saving lives, said Mila Romanoff, data and governance lead for United Nations Global Pulse, a U.N. program that has studied using data to improve emergency responses to epidemics like Ebola and dengue fever.
“We need to have a framework that would allow companies and public authorities to cooperate, to enable proper response for the public good,” Ms. Romanoff said. To reduce the risk that coronavirus surveillance efforts might violate people’s privacy, she said, governments and companies should limit the collection and use of data to only what is needed. “The challenge is,” she added, “how much data is enough?”
In hundreds of cities in China, the government is requiring citizens to use software on their phones that automatically classifies each person with a color code — red, yellow or green — indicating contagion risk. The software determines which people should be quarantined or permitted to enter public places like subways. But officials have not explained how the system makes such decisions, and citizens have felt powerless to challenge it.
In Singapore, the Ministry of Health has posted information online about each coronavirus patient, often in stunning detail, including relationships to other patients. The idea is to warn individuals who may have crossed paths with them, as well as alert the public to potentially infected locations. “Case 219 is a 30-year-old male,” says one entry on the Health Ministry’s site, who worked at the “Sengkang Fire Station (50 Buangkok Drive),” is “in an isolation room at Sengkang General Hospital” and “is a family member of Case 236.”
On Friday, Singapore also introduced a smartphone app for citizens to help the authorities locate people who may have been exposed to the virus. The app, called TraceTogether, uses Bluetooth signals to detect mobile phones that are nearby. If an app user later tests positive for the virus, the health authorities may examine the data logs from the app to find people who crossed their paths. A government official said the app preserved privacy by not revealing users’ identities to one another.
In January, South Korean authorities began posting detailed location histories on each person who tested positive for the coronavirus. The site has included a wealth of information — such as details about when people left for work, whether they wore masks in the subway, the name of the stations where they changed trains, the massage parlors and karaoke bars they frequented and the names of the clinics where they were tested for the virus.
In South Korea’s highly wired society, however, internet mobs exploited patient data disclosed by the government site to identify people by name and hound them.
In New York this month, Mayor Bill de Blasio posted details on Twitter about a lawyer in Westchester County who was the second person in the state to test positive for the virus — including the name of the man’s seven-person law firm and the names of the schools attended by two of his children. A few hours later, The New York Post identified the lawyer by name and was soon referring to him as “patient zero” in the coronavirus outbreak in New Rochelle.
In a response posted on Facebook, Adina Lewis Garbuz, a lawyer who is the wife of the man, Lawrence Garbuz, pleaded with the public to focus instead on the personal efforts the family had made to isolate themselves and notify people who came into contact with them.
“We would have preferred this all remain private,” Ms. Garbuz wrote in the Facebook post, “but since it is no longer, I wanted to at least share some truths and allay people’s fears.”
