Law in the Internet Society

View   r3  >  r2  ...
IppeiKawaseFirstEssay 3 - 04 Jan 2021 - Main.IppeiKawase
Line: 1 to 1
 
META TOPICPARENT name="FirstEssay"
Changed:
<
<

Privacy and Open Source in the Time of Pandemic

>
>

Can Contact Tracing App be an Effective Solution?

 
Changed:
<
<
-- By IppeiKawase - 09 Oct 2020
>
>
-- By IppeiKawase - 03 Jan 2021
 

Introduction

Changed:
<
<
The COVID-19 pandemic has brought about changes in various fields and in different levels across the world. In particular, the relation between our lives and technology has deepened even more than before the pandemic. In this essay, I will take a brief look at how contact tracing application works in the context of privacy, review how it is introduced with the aid by the open source community, and consider an issue as to the relation between a government, engineers, and citizens.
>
>
The COVID-19 pandemic has brought about changes in various fields and at different levels across the world. In particular, the relation between our lives and technologies has deepened even more than before the pandemic. One of technologies that have been introduced during the pandemic is the contact tracing application. The app was adopted in many countries to address pandemic, but can it an effective solution? This essay will take a brief look at how such apps work and examine issues of the apps in terms of effectiveness as an infection control tool.
 
Changed:
<
<

What is Contact Tracing App?

>
>

Types of Contact Tracing App

 
Changed:
<
<
Having a potential risk of intruding upon our privacy, contact tracing applications are partly developed from the open source community in some parts of the world. There are several types, but I will take an example of system developed by Apple and Google jointly since it is said to be safer than other types such as GPS-based tracing and it is used in some countries such as the UK, Germany, and Japan.
>
>

Location Information Type

This type of apps identifies a person’s contacts by tracking the phone’s movements by using GPS or other information gathered from public infrastructure. Countries such as Israel and India adopt this type. The advantage is that health authorities can collect individual information and directly approach those who contacted a person positive for the virus. However, this type has a disadvantage of collecting individual data unnecessarily and has the possibility of threatening and invading privacy.
 
Changed:
<
<
This system works as follows: in the first step, a user needs to download the app and opt in to contact tracing, which triggers the device to generate proximity identifiers that are changed every 15 minutes. Using Bluetooth technology, these proximity identifiers are exchanged with other devices which are also used in the same way and are physically close to them. When a user tests positive for COVID-19, the app informs other users who were in close contact with the person in the last 14 days. The proximity identifier is only processed inside the devices and the app does not track a user’s location nor collect other information which reveal a user’s identity.
>
>

Bluetooth Type

This type uses so-called proximity tracking, where phones exchange encrypted tokens with any other nearby phones over Bluetooth. Compared to the first type, it has the advantage of protecting privacy by anonymizing data. Countries and regions such as Germany, Japan, and New York State have introduced this type. More specifically, this system works as follows: in the first step, a user needs to download the app and opt in to contact tracing, which triggers the device to generate proximity identifiers that are changed every 15 minutes. Using Bluetooth technology, these proximity identifiers are exchanged with other devices that are also used in the same way and are physically close to them. When a user tests positive for COVID-19, the app informs other users who were in close contact with the person in the last 14 days. The proximity identifier is only processed inside the devices, and the app does not track a user’s location nor collect other information that reveals a user’s identity.
 
Changed:
<
<

How was app released?

>
>

Purpose of Contact Tracing App

 
Changed:
<
<
These explanations appear to be plausible enough to accept such apps among people, but in reality, those apps have not been spread in many of the countries where the government adopted them. In addition, it is pointed out that there can be privacy issues involved with such system. In this part, I would like to review the process in which this app was introduced with collaboration between a government and civil organization, by citing a case of Japan. By doing this, I will examine how the relation should be between a government, engineers, and citizens in the context of protecting privacy and utilizing open source.
>
>
Each government has a common goal to prevent and reduce infections, but the purpose of introducing a contact tracing app can be different depending on each government. The first type is to restrict areas of activities of infected people and isolate them as necessary. Governments such as China, South Korea, and Taiwan are categorized as this group. Second, health authorities such as India, Singapore, and Australia use contact tracing app as a supplemental tool to keep track of close contacts. The third and the most lenient type of use is to notify a person who contacted an infected person and thereby to change people’s behaviors. Countries such as Germany, Japan, and Israel have this purpose to introduce contact tracing apps.
 
Changed:
<
<
In Japan, at the beginning of the pandemic, several civil engineers, including Code for Japan started development of contact tracing app as an open source project, later named as “Covid-19 Radar Japan”, with the coordination and support of the government. According to one of the engineers who led the project, they started it as an open source project and made the code public in GitHub? , in order that other countries and regions will be able to refer it and that it can be examined by third parties in pursuit of securing privacy and transparency. This situation changed after Apple and Google announced, on April 10, 2020, that they had decided to release APIs which enable contact tracing between Android and iOS devices using apps run by public health authorities. Following this, the Japanese government appointed the ministry of health as an office in charge of development of the app, and the ministry consigned its development to a software vendor. The app, named as “COCOA (COVID-19 Contact Confirming Application)”, was finally released on June 19. In this process, although the app was to be run by the government, COCOA was developed from civil engineers’ open source project.
>
>

Issues of Contact Tracing App

 
Changed:
<
<

What issue should be considered?

>
>
How effectively can contact tracing apps serve these purposes? One of the key factors for this app to be successful is the adoption rate: the more people use it, the more effective it can be. One research conducted by Oxford University shows that in order to stop the epidemic, it is necessary for approximately 60% of the population to use the app, and even with lower numbers of app users, it can contribute to a reduction in the number of COVID-19 cases and deaths. In the United States, for example, New York State launched its app on October 1 and over a million people have downloaded it in the first two months, which amounts to about 5% of the population. As this example and other countries’ situation show, the current adoption rate of this app is not sufficient to stop the virus or reduce the cases.
 
Changed:
<
<
From this case, I will consider an issue as to the relation between the government, civil engineers, and citizens. Civil engineers are certainly included in citizens in general, but in this context they played a significant role in developing the system, so here I discuss separately. Soon after the app was released, some bugs were found and civil engineers were criticized by the general public. But who should be responsible for the product which was developed with substantial assistance by the open source community? In this case, despite the fact that the government is the developing body and responsible for the project, it seems that those who criticized did not have a clear understanding of the relation between the government and the role of civil engineers involved in this project. Furthermore, the government has not provided enough explanations about the content of the app and the framework of its development, which might have led to citizens’ distrust toward the government policy and the app itself.
>
>
One of the possible reasons why the adoption rate cannot easily reach a certain level is that some people, especially those who need health protection such as the elderly, do not know the existence of such app or do not have the knowledge or skills to use it even if they know the app itself. In these circumstances, it is necessary for the government to reach out to such people and assist them in downloading and using the app. Still, this supportive measure cannot solve the problem with respect to those who do not have a device that can install such applications. The other possible and major reason is that even if people have the knowledge, skills, and necessary devices, they can decide at their own will not to download it because of privacy concerns. This can be an issue even when government adopts the second type of application I mentioned above, because even if the use of Bluetooth reduces the risk of invading privacy technologically and objectively, people can still have subjective concerns regarding their privacy, especially when it comes to sensitive information such as health data.
 
Changed:
<
<
In this regard, the government should take an initiative and fulfill its responsibility with clear explanations with respect to not only how to use it but also how the system works as a whole. Although we can see on the website explanations about usage of the app with a brochure and a link to a website where the source code is made public, we cannot easily gain in understanding of details and background of the application. In addition, citizens should not passively receive or interpret information provided by the government or the media, but they should more actively access information which is actually available and improve the technology by themselves. Through this process, people will gain a power to build a society where they do not rely heavily on government or proprietary entities and will not ruin knowledgeable engineers and valuable resources.
>
>
While it is not easy to remove major obstacles, especially those with respect to privacy, we should note that some of these applications have evolved in a unique way, which may suggest a possible solution to the question as to privacy, That is, some applications were launched and improved by open source community where anyone can see and understand how the application works. Although the main purpose of this attempt is to develop an app efficiently and safely, and it requires us to have a certain level of knowledge to understand the system and technology, these attempts can consequently lead to improvement of transparency and reliability toward contact tracing app.
 

Conclusion

Changed:
<
<
During the pandemic, although there have been a wide range of issues as to technology, I have seen citizens with their knowledge and skills of engineering actively involved in developing and improving better technology. In fact, since the source code was made public, some engineers who had not participated in the project at first were able to point out what problems lie in the app and how such problems should be solved. I believe that by efforts and participations of citizens, we will be able to establish a harmonious relationship with technology in the future.

This isn't much of a conclusion because the draft didn't possess a strong central idea to communicate. The most important route to improvement in the next draft is to bring a clearer theme to the exposition.

Perhaps one way to arrive at that theme would be to broaden the perspective. Japan is one place, and the smartphone is one form of computer. Looking more broadly to the problems of epidemic suppression beyond Japan's borders, and to the relative role of the smartphone application in dealing with contact tracing would both make sense. The supposed utility of the applications hasn't exactly panned out, less because of technical issues with battery life to be addressed by the manufacturers of the operating systems, or because of the rate at which people chose or did not choose to add new surveillance software to their devices, but because proximity-based forward contact tracing doesn't help much to control the epidemic in the absence of other factors, like economic and social support for persons who should isolate themselves; and backward tracing to understand the overdispersion properties of the infection in community spread, which smartphone applications cannot help to achieve.

By looking outward more, in both geographical and social terms, the next draft can be both more informative and more analytical. One can explain in 1,000 words what happened on one set of islands to a few people. Or one can explain why the applications mostly turned out to be useless everywhere. Which you do is of course your choice, but the two structures of explanation can benefit from being thought about together.

>
>
Contact tracing app can be one tool for the purpose of reducing infections or changing people’s behavior. However, under the current circumstances, it has not been an effective solution due to the several factors above. Still, we need to note that some attempts which can contribute to both developing applications and improving transparency.
 

Revision 3r3 - 04 Jan 2021 - 04:16:31 - IppeiKawase
Revision 2r2 - 04 Nov 2020 - 15:55:17 - EbenMoglen
This site is powered by the TWiki collaboration platform.
All material on this collaboration platform is the property of the contributing authors.
All material marked as authored by Eben Moglen is available under the license terms CC-BY-SA version 4.
Syndicate this site RSSATOM