[A]ny data collection and digital monitoring of potential carriers of COVID-19 should take into consideration and commit to these principles:
- Privacy intrusions must be necessary and proportionate. A program that collects, en masse, identifiable information about people must be scientifically justified and deemed necessary by public health experts for the purpose of containment. And that data processing must be proportionate to the need. For example, maintenance of 10 years of travel history of all people would not be proportionate to the need to contain a disease like COVID-19, which has a two-week incubation period.
- Data collection based on science, not bias. Given the global scope of communicable diseases, there is historical precedent for improper government containment efforts driven by bias based on nationality, ethnicity, religion, and race -- rather than facts about a particular individual's actual likelihood of contracting the virus...
- Expiration. ... The government and its corporate cooperators must roll back any invasive programs created in the name of public health after crisis has been contained.
- Transparency. Any government use of \"big data\" to track virus spread must be clearly and quickly explained to the public....
- Due Process. If the government seeks to limit a person's rights based on this \"big data\" surveillance ... then the person must have the opportunity to timely and fairly challenge these conclusions and limits.
Abridged from original, well worth reading in full.https://www.schneier.com/blog/archives/2020/03/emergency_surve.html