Sitemap

Contact Tracing Requires Independent Governance

4 min readApr 30, 2020
Press enter or click to view image in full size

Contact Tracing is the COVID19 rage. Google and Apple have jumped into the fray, collaborating on enabling our smartphones to engage in contact tracing. Together this represents approximately 67% of the smartphone market, depending on your jurisdiction. A robust portion of the smartphone market, insufficient on to itself, but robust. Furthermore, the solution is easily adopted by others in the form of apps, using the ubiquitous Bluetooth technology embedded in most phones. All of this is mentioned not to advocate for a particular technology, but rather to indicate that the functional capability to do significant contact tracing is nearing.

The implications of ubiquitous contact tracing are far-reaching. There are questions about privacy, trust, cybersecurity as well as ethics and bias. A robust contact tracing program will touch many people, if not all people. Therefore the impact will be great. Enormous amounts of data may be collected about you, with the rationale being public health. It is in the name of “community” or public health, that these ideas press forward rapidly and are implemented, often untested and rarely with deep consideration of the downside risks and second-order impacts.

Contact tracing breaches a new barrier in the debate on individual privacy. To date, ubiquitous surveillance without consent has been solely the domain of the police or government and usually has been, after-the-fact analysis collecting decentralized data (notwithstanding any opinions about super-surveillance by top-secret government entities which should also have oversight, even if held secret, like FISA). Now, what is contemplated, and in fact, already launched in some jurisdictions like Singapore, is centralized, government-led contact tracing.

Contact tracing changes the depth of impact. It is projected to touch each of us, measure our spatial distance and/or locations, and then record that data. What data is collected? Who sees the data? Can that data be stolen? Sold? Analyzed? Recorded permanently? All of these are valid questions, questions that you have a right to have answered. Questions that you should demand transparency around. Moreover, who is looking after your interests, assuring that the individual (you)is being protected in whatever contact tracing system gets enacted?

Remember the goal, from the government’s perspective, is public health NOT the protection of your individual rights and freedoms. No government or authority or company deserves to have that kind of control and access to data without oversight. Moreover, it is not necessary that they have this control without oversight. It is simply common sense to have checks and balances on entities with that much power and access.

The issues around contact tracing are technical. The systems themselves are technical. To engage in meaningful governance, experts will be required to analyze and understand these systems. We must work collaboratively to empower and educate unbiased, unaffiliated individuals who can quickly become experts or join a team of experts with specialized skills on behalf of all people.

The point is that if citizens are unable, or unwilling or simply not allowed to make informed decisions on the subject, then they need to demand representation. People need to have someone on their side, looking out for the interest of the individual. We recommend two (2) key elements of governance for any contact tracing system. First that it is Auditable, second that there is a body of unaffiliated experts who act as an Independent Oversight on behalf of individuals covered by the system.

Auditable means that the system can be reviewed independently for compliance with a set of transparent and universal rules. Audit rules, which have been discussed at length here: https://medium.com/@ForHumanity_Org/what-does-an-audit-for-ai-safety-look-like-873740d6f6b0

have these 5 characteristics:

  1. Binary (compliant/non-compliant)
  2. Measurable/Unambiguous
  3. Iterated and Open-Source
  4. Consensus Driven
  5. Implementable

As these rules are drafted, when they have the characteristics listed above, the audit firms will be in a position to safely and robustly ensure that these standards are being met by the contact tracing system.

The second and more easily implemented rule is to create an independent governance board for contact tracing oversight. The currently proposed rule, which we think will garner immediate consensus is as follows:

All Contact Tracing programs MUST have Independent Oversight.

Independent means not influenced or controlled by others in matters of opinion, conduct, etc.; thinking or acting for oneself

Oversight means supervision; watchful care

Said plainly, this would be a panel of experts who are unaffiliated with both the authority permitting the contact tracing as well as the firm or organization implementing the contact tracing system. They should not be selected by the technology firm nor should specific members be selected by the paying entity. This governance entity exists to protect the people being tracked ONLY. Examples of best practice governance would be a system that is:

  1. Transparent
  2. Highly-Secure
  3. Opt-In
  4. Minimizing data collection, maximizing privacy
  5. Unbiased
  6. Ethical
  7. Trustworthy

Currently, we are working to draft the audit rules and assemble teams of experts to participate on Independent Oversight Boards. The process of developing the audit rules for contact tracing is open to all concerned. Our process is transparent and inclusive. We welcome your best thoughts and critiques and you can join the discussion on Loomio (a new discussion management service) by registering below. Or you can simply come and register your vote in support of contact tracing governance.

https://www.forhumanity.center/contact-tracing-governance-1

--

--

Ryan Carrier
Ryan Carrier

Written by Ryan Carrier

ForHumanity is a non-profit organization dedicated to raising awareness and examining the risks from the growth of AI & Automation. https://ForHumanity.center

Responses (2)