New warning on virus apps' digital privacy safeguards

"Given that this level of digital tracing for public health is so novel, necessity and efficiency need to be proved," said Claudio Guarneri from Amnesty Tech, part of Amnesty International, adding contact-tracing apps could pose a risk for privacy rights, be discriminatory and exacerbate social inequality.

This potential backlash could encourage the upcoming German EU's council presidency in the second half of the year to address the lack of human right safeguards across member states when applying tracing apps or any upcoming technologies, as well as when exporting surveillance technologies, Lena Rohrbach from Amnesty International Germany told this website.

Meanwhile, MEPs on the European Parliament's committee on civil liberties warned last week that "whenever personal data is processed in the context of fighting Covid-19, data protection rules are indispensable".

Some member states have changed - either slightly or significantly - their data protection rules to respond to the coronavirus pandemic.

Hungary's example

Earlier this month, the Hungarian government suspended certain rights under the EU's data protection rules until the end of the state of emergency - which has no deadline in Hungary.

As a result, NGO Access Now, Hungarian Civil Liberties Union, and Civil Liberties Union for Europe on Monday all called on the EU's data protection watchdog to investigate the compatibility of a Hungarian government decree-law and the EU data protection rules.

The Hungarian decree limits the rights under Articles 15 to 22 of the General Data Protection Regulation (GDPR) linked to the processing of data conducted by both public and private entities for the fight against the Covid-19.

These include the right to access personal data, the right to not be subjected to profiling or the right to be forgotten.

Additionally, the new rules establish time limits for the exercise of remedy rights, including the right to lodge a complaint and the right to an effective judicial remedy - which are guaranteed by Articles 77 to 79 of the GDPR.

"The decision by the Hungarian government to limit the application of data subjects' rights is disproportionate, unjustified, and potentially harmful to the public's response to fight the virus," the three civil society organisations warned in a letter.

The head of the European Data Protection Supervisor, Wojciech Wiewiórowski, said last week that data protection should not become a problem to enabling digital solutions for a public health crisis.

"We have the moral responsibility to use the tools that we have on our hands to fight the pandemic, but we have also the responsibility to minimise the impact of these technologies on our fundamental rights," Wiewiórowski said.