{"id":268135,"date":"2020-04-09T10:30:27","date_gmt":"2020-04-09T14:30:27","guid":{"rendered":"https:\/\/policyoptions.irpp.org\/issues\/privacy-rights-should-drive-our-approach-to-using-personal-data-during-pandemic\/"},"modified":"2025-10-07T22:56:16","modified_gmt":"2025-10-08T02:56:16","slug":"privacy-rights-should-drive-our-approach-to-using-personal-data-during-pandemic","status":"publish","type":"issues","link":"https:\/\/policyoptions.irpp.org\/fr\/2020\/04\/privacy-rights-should-drive-our-approach-to-using-personal-data-during-pandemic\/","title":{"rendered":"Privacy rights should drive our approach to using personal data during pandemic"},"content":{"rendered":"

As the COVID-19 pandemic wreaks havoc around the globe, governments are increasingly experimenting with data and technology in their struggle to contain the disease and limit its impacts. This is adding considerable pressure on Canada to do more \u2013 and quickly. But privacy rights, framed by concepts of necessity and proportionality, must also shape the responses we take.<\/p>\n

In Canada, federal and provincial governments have their own sources of data, including statistical and public health data as well as that generated by the health-care system. But governments have relatively little location and tracking data for individuals. This is in part because they do not normally need such information, but also because constitutional rights to privacy require court authorization for tracking individuals\u2019 activities. Our governments simply do not \u2013 and should not \u2013 routinely collect such data.<\/p>\n

However, the private sector operates under different rules. Collecting location data is essential to providing some services; for others, it isn\u2019t essential, but profitable, and weak data protection laws have allowed widespread collection and sharing of location data via mobile apps. Individuals ostensibly consent to such practices through privacy policies that are overly long, complex, and subject to unilateral change. In many instances, we are unaware of the quantity or quality of location data collected by apps and devices, or of how many different companies are collecting \u2013 and sharing \u2013 this data. The result is vast stores of location data in the hands of companies, often without subjects having a clear sense of what has been collected or by whom. As we continue to tap into the benefits of the Internet of Things, other rich and often sensitive data about ourselves \u2013 collected from our cars, digital personal assistants, smart appliances, and fitness trackers \u2013 make us increasingly transparent to opaque corporations.<\/p>\n

Can governments tap into these stores of private-sector data? Should they? These are separate questions, and if the answers differ, it\u2019s because our laws have allowed private sector collection and use of personal data to consistently erode privacy and human rights.<\/p>\n

That said, in a time of crisis, we tend to focus pragmatically on what can be done within the boundaries of the law. If the data already exists, should we not use it to serve the broader public interest?<\/p>\n

Data about people in the aggregate may be highly relevant and useful, and some companies seem willing to share such data with governments to use in mapping outbreaks and modelling the spread of the COVID-19 virus. The U.S. government, for example, is said<\/a> to be in talks with major platform companies about sharing aggregate data. Several European countries are also reportedly<\/a> using aggregate data from telcos to better understand the spread of infection or patterns of movement of the population.<\/p>\n

Plans of this kind are afoot in Canada as well. Data protection laws do not prevent the sharing of aggregate data, although care must be taken to ensure it\u2019s properly de-identified. Location information, with other available data, is particularly useful to identify specific individuals and must therefore be treated with caution. But if appropriate care is taken, in consultation with federal or provincial privacy commissioners, the use of aggregate and de-identified data should pose relatively few legal problems.<\/p>\n

\"\"<\/a>
A girl holds a smartphone with TraceCovid app in Rotterdam, the Netherlands on April 7, 2020. Photo by Robin Utrecht\/ABACAPRESS.COM<\/figcaption><\/figure>\n

By contrast, data protection laws limit the circumstances in which government institutions can collect personally identifiable information. Most require direct collection from the individual, with certain exceptions. Private-sector data protection laws also limit organizations sharing their data (including with governments) without consent, although there are many exceptions. Those include emergencies, where an individual\u2019s life is at risk; or, where a specific law permits data sharing. Thus, governments could enact emergency legislation requiring information sharing, although they would be wise to also enact provisions that ensure this information is used only for exceptional circumstances identified in the law, and retained only so long as is necessary.<\/p>\n

One way or another, governments could, in an emergency, compel the private sector to share data \u2013 for example, for contact-tracing purposes. Once a person is known to be infected, their recent movements could be tracked to identify possible contacts to self-isolate to limit further spread of the disease. Israel and South Korea<\/a> have gone this route. This kind of use of data is much more privacy-invasive. Appropriate safeguards and oversight are required \u2013 as the Supreme Court of Israel recently reminded<\/a> the Israeli government.<\/p>\n

Data and technologies used to track individuals are far more problematic. Taiwan<\/a>, Singapore<\/a>, and Poland<\/a>, for example, are reportedly using apps that collect location data to ensure that individuals with COVID-19 remain in quarantine. Such apps may include regular report-in requirements \u2013 complete with additional geolocation data \u2013 to prevent individuals from evading quarantine by turning off phones or leaving them at home. Hong Kong uses a GPS-enabled wearable device for similar monitoring purposes.<\/p>\n

Such tracking measures are inherently privacy-invasive. A law enabling tracking for public health purposes would have to hold up to constitutional scrutiny, but might be justified on the basis that it applies to individuals who present a real threat to the population if they evade quarantine. However, in a context \u2013 Ontario, for example \u2013 where many people with symptoms are not even tested, it might be disproportionate to subject the subset that is tested to the equivalent of monitored house arrest, while symptomatic but untested individuals voluntarily self-isolate. Such distinctions might even discourage those with mild-to-moderate symptoms from seeking testing (assuming it is even available).<\/p>\n

Singapore and South Korea<\/a> have also, controversially, publicized very loosely de-identified personal information, including detailed location data, about people who have tested positive for COVID-19. Concerned members of the public can search these data to see if they have been in specific areas at the same time as infected persons. But the program raises concerns about privacy and vigilantism.<\/p>\n

In an era of data-driven technological innovation, demands that this be used to combat the spread of COVID-19 aren\u2019t surprising. Some tech tools seem superficially attractive, belying the costs to privacy and human rights. Canadian federal and provincial privacy commissioners can offer crucial guidance to policy-makers on working within the boundaries of existing law, or on designing emergency measures that are balanced and time-limited. Careful journalism and civil society are also crucial to exposing and measuring solutions that threaten fundamental social values.<\/p>\n

Privacy is no barrier to solutions to pandemic problems; however, privacy rights, framed by concepts of necessity and proportionality can \u2013 and should \u2013 shape data-driven responses.<\/p>\n

This article is part of the\u00a0The Coronavirus Pandemic: Canada\u2019s Response<\/a>\u00a0<\/span>special feature.<\/strong><\/p>\n

Photo: Shutterstock, by elenabsl.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

As the COVID-19 pandemic wreaks havoc around the globe, governments are increasingly experimenting with data and technology in their struggle to contain the disease and limit its impacts. This is adding considerable pressure on Canada to do more \u2013 and quickly. But privacy rights, framed by concepts of necessity and proportionality, must also shape the […]<\/p>\n","protected":false},"featured_media":242204,"template":"","meta":{"_acf_changed":false,"content-type":"","ep_exclude_from_search":false,"apple_news_api_created_at":"2025-10-08T02:56:19Z","apple_news_api_id":"baba67f7-b89f-4b1f-9652-dd7dcdd2d2d9","apple_news_api_modified_at":"2025-10-08T02:56:19Z","apple_news_api_revision":"AAAAAAAAAAD\/\/\/\/\/\/\/\/\/\/w==","apple_news_api_share_url":"https:\/\/apple.news\/Aurpn97ifSx-WUt19zdLS2Q","apple_news_cover_media_provider":"image","apple_news_coverimage":0,"apple_news_coverimage_caption":"","apple_news_cover_video_id":0,"apple_news_cover_video_url":"","apple_news_cover_embedwebvideo_url":"","apple_news_is_hidden":"","apple_news_is_paid":"","apple_news_is_preview":"","apple_news_is_sponsored":"","apple_news_maturity_rating":"","apple_news_metadata":"\"\"","apple_news_pullquote":"","apple_news_pullquote_position":"","apple_news_slug":"","apple_news_sections":[],"apple_news_suppress_video_url":false,"apple_news_use_image_component":false},"categories":[9359,9372,9383],"tags":[9291,8543],"article-status":[],"irpp-category":[4339,4337],"section":[],"irpp-tag":[],"class_list":["post-268135","issues","type-issues","status-publish","has-post-thumbnail","hentry","category-loi-droits","category-recent-stories-fr","category-sciences-et-technologies","tag-donnees","tag-privacy-fr","irpp-category-loi-et-justice","irpp-category-science-et-technologie"],"acf":[],"apple_news_notices":[],"yoast_head":"\nPrivacy rights should drive our approach to using personal data during pandemic<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/policyoptions.irpp.org\/fr\/2020\/04\/privacy-rights-should-drive-our-approach-to-using-personal-data-during-pandemic\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Privacy rights should drive our approach to using personal data during pandemic\" \/>\n<meta property=\"og:description\" content=\"As the COVID-19 pandemic wreaks havoc around the globe, governments are increasingly experimenting with data and technology in their struggle to contain the disease and limit its impacts. This is adding considerable pressure on Canada to do more \u2013 and quickly. But privacy rights, framed by concepts of necessity and proportionality, must also shape the […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/policyoptions.irpp.org\/fr\/2020\/04\/privacy-rights-should-drive-our-approach-to-using-personal-data-during-pandemic\/\" \/>\n<meta property=\"og:site_name\" content=\"Policy Options\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/IRPP.org\" \/>\n<meta property=\"article:modified_time\" content=\"2025-10-08T02:56:16+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/policyoptions.irpp.org\/wp-content\/uploads\/2025\/08\/23049381-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1707\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@irpp\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/policyoptions.irpp.org\/fr\/2020\/04\/privacy-rights-should-drive-our-approach-to-using-personal-data-during-pandemic\/\",\"url\":\"https:\/\/policyoptions.irpp.org\/fr\/2020\/04\/privacy-rights-should-drive-our-approach-to-using-personal-data-during-pandemic\/\",\"name\":\"Privacy rights should drive our approach to using personal data during pandemic\",\"isPartOf\":{\"@id\":\"https:\/\/policyoptions.irpp.org\/fr\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/policyoptions.irpp.org\/fr\/2020\/04\/privacy-rights-should-drive-our-approach-to-using-personal-data-during-pandemic\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/policyoptions.irpp.org\/fr\/2020\/04\/privacy-rights-should-drive-our-approach-to-using-personal-data-during-pandemic\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/policyoptions.irpp.org\/wp-content\/uploads\/2025\/08\/23049381-scaled.jpg\",\"datePublished\":\"2020-04-09T14:30:27+00:00\",\"dateModified\":\"2025-10-08T02:56:16+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/policyoptions.irpp.org\/fr\/2020\/04\/privacy-rights-should-drive-our-approach-to-using-personal-data-during-pandemic\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/policyoptions.irpp.org\/fr\/2020\/04\/privacy-rights-should-drive-our-approach-to-using-personal-data-during-pandemic\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\/\/policyoptions.irpp.org\/fr\/2020\/04\/privacy-rights-should-drive-our-approach-to-using-personal-data-during-pandemic\/#primaryimage\",\"url\":\"https:\/\/policyoptions.irpp.org\/wp-content\/uploads\/2025\/08\/23049381-scaled.jpg\",\"contentUrl\":\"https:\/\/policyoptions.irpp.org\/wp-content\/uploads\/2025\/08\/23049381-scaled.jpg\",\"width\":2560,\"height\":1707},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/policyoptions.irpp.org\/fr\/2020\/04\/privacy-rights-should-drive-our-approach-to-using-personal-data-during-pandemic\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/policyoptions.irpp.org\/fr\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Privacy rights should drive our approach to using personal data during pandemic\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/policyoptions.irpp.org\/fr\/#website\",\"url\":\"https:\/\/policyoptions.irpp.org\/fr\/\",\"name\":\"Policy Options\",\"description\":\"Institute for Research on Public Policy\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/policyoptions.irpp.org\/fr\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Privacy rights should drive our approach to using personal data during pandemic","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/policyoptions.irpp.org\/fr\/2020\/04\/privacy-rights-should-drive-our-approach-to-using-personal-data-during-pandemic\/","og_locale":"fr_FR","og_type":"article","og_title":"Privacy rights should drive our approach to using personal data during pandemic","og_description":"As the COVID-19 pandemic wreaks havoc around the globe, governments are increasingly experimenting with data and technology in their struggle to contain the disease and limit its impacts. This is adding considerable pressure on Canada to do more \u2013 and quickly. But privacy rights, framed by concepts of necessity and proportionality, must also shape the […]","og_url":"https:\/\/policyoptions.irpp.org\/fr\/2020\/04\/privacy-rights-should-drive-our-approach-to-using-personal-data-during-pandemic\/","og_site_name":"Policy Options","article_publisher":"https:\/\/www.facebook.com\/IRPP.org","article_modified_time":"2025-10-08T02:56:16+00:00","og_image":[{"width":2560,"height":1707,"url":"https:\/\/policyoptions.irpp.org\/wp-content\/uploads\/2025\/08\/23049381-scaled.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_site":"@irpp","twitter_misc":{"Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/policyoptions.irpp.org\/fr\/2020\/04\/privacy-rights-should-drive-our-approach-to-using-personal-data-during-pandemic\/","url":"https:\/\/policyoptions.irpp.org\/fr\/2020\/04\/privacy-rights-should-drive-our-approach-to-using-personal-data-during-pandemic\/","name":"Privacy rights should drive our approach to using personal data during pandemic","isPartOf":{"@id":"https:\/\/policyoptions.irpp.org\/fr\/#website"},"primaryImageOfPage":{"@id":"https:\/\/policyoptions.irpp.org\/fr\/2020\/04\/privacy-rights-should-drive-our-approach-to-using-personal-data-during-pandemic\/#primaryimage"},"image":{"@id":"https:\/\/policyoptions.irpp.org\/fr\/2020\/04\/privacy-rights-should-drive-our-approach-to-using-personal-data-during-pandemic\/#primaryimage"},"thumbnailUrl":"https:\/\/policyoptions.irpp.org\/wp-content\/uploads\/2025\/08\/23049381-scaled.jpg","datePublished":"2020-04-09T14:30:27+00:00","dateModified":"2025-10-08T02:56:16+00:00","breadcrumb":{"@id":"https:\/\/policyoptions.irpp.org\/fr\/2020\/04\/privacy-rights-should-drive-our-approach-to-using-personal-data-during-pandemic\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/policyoptions.irpp.org\/fr\/2020\/04\/privacy-rights-should-drive-our-approach-to-using-personal-data-during-pandemic\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/policyoptions.irpp.org\/fr\/2020\/04\/privacy-rights-should-drive-our-approach-to-using-personal-data-during-pandemic\/#primaryimage","url":"https:\/\/policyoptions.irpp.org\/wp-content\/uploads\/2025\/08\/23049381-scaled.jpg","contentUrl":"https:\/\/policyoptions.irpp.org\/wp-content\/uploads\/2025\/08\/23049381-scaled.jpg","width":2560,"height":1707},{"@type":"BreadcrumbList","@id":"https:\/\/policyoptions.irpp.org\/fr\/2020\/04\/privacy-rights-should-drive-our-approach-to-using-personal-data-during-pandemic\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/policyoptions.irpp.org\/fr\/"},{"@type":"ListItem","position":2,"name":"Privacy rights should drive our approach to using personal data during pandemic"}]},{"@type":"WebSite","@id":"https:\/\/policyoptions.irpp.org\/fr\/#website","url":"https:\/\/policyoptions.irpp.org\/fr\/","name":"Policy Options","description":"Institute for Research on Public Policy","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/policyoptions.irpp.org\/fr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"}]}},"_links":{"self":[{"href":"https:\/\/policyoptions.irpp.org\/fr\/wp-json\/wp\/v2\/issues\/268135","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/policyoptions.irpp.org\/fr\/wp-json\/wp\/v2\/issues"}],"about":[{"href":"https:\/\/policyoptions.irpp.org\/fr\/wp-json\/wp\/v2\/types\/issues"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/policyoptions.irpp.org\/fr\/wp-json\/wp\/v2\/media\/242204"}],"wp:attachment":[{"href":"https:\/\/policyoptions.irpp.org\/fr\/wp-json\/wp\/v2\/media?parent=268135"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/policyoptions.irpp.org\/fr\/wp-json\/wp\/v2\/categories?post=268135"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/policyoptions.irpp.org\/fr\/wp-json\/wp\/v2\/tags?post=268135"},{"taxonomy":"article-status","embeddable":true,"href":"https:\/\/policyoptions.irpp.org\/fr\/wp-json\/wp\/v2\/article-status?post=268135"},{"taxonomy":"irpp-category","embeddable":true,"href":"https:\/\/policyoptions.irpp.org\/fr\/wp-json\/wp\/v2\/irpp-category?post=268135"},{"taxonomy":"section","embeddable":true,"href":"https:\/\/policyoptions.irpp.org\/fr\/wp-json\/wp\/v2\/section?post=268135"},{"taxonomy":"irpp-tag","embeddable":true,"href":"https:\/\/policyoptions.irpp.org\/fr\/wp-json\/wp\/v2\/irpp-tag?post=268135"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}