Press release
Department of Health and the HSE announce the publication of the Covid Tracker App Data Protection Impact Assessment and source code
From Department of Health
Published on
Last updated on
From Department of Health
Published on
Last updated on
The Department of Health and the Health Service Executive have today (Friday, 26 June) published several important documents as part of our ongoing commitment to openness and transparency in the development of the Covid Tracker App for Ireland.
The Data Protection Impact Assessment, the source code, the Product Explainer for the Covid Tracker App, and a series of app design and development reports are available on the HSE website here: www.hse.ie/!DW3Q7R.
As the country reopens, contact tracing and the early identification of symptoms, will become increasingly important as more people are visiting family and friends, exercising, socialising, shopping, returning to work and using public transport.
The Covid Tracker App will allow each individual to play an important part in controlling COVID-19, helping everyone to stay safe and protect each other. The app will record if a user is in close contact with another user by exchanging anonymous codes that are held on the users’ phones.
People who test positive for COVID-19 will be able to choose if they want to anonymously alert other app users who they have been in close contact with. In this way the app will augment the existing testing and tracing operation and enable the notification of close contacts that are unknown to each other.
The app will also allow the user to anonymously record information about how they feel every day. The symptom tracker has the potential to generate valuable national data relevant to COVID-19. The accurate reporting of the timing of the first onset of symptoms will improve the speed and the accuracy of the tracing process.
In line with data protection law, the processing of data will be limited to this stated purpose. All personal data that is processed is kept to an absolute minimum. Users can choose to delete the app at any time and have full control over what information they share through the app. Further, a governance commitment is in place to dismantle the operation of the app once the COVID-19 crisis is over.
Chief Information Officer (CIO) of the HSE, Fran Thompson said:
“The design of Covid Tracker App has been informed by a robust development and testing programme. The app development process here in Ireland has been led by the HSE and the Department of Health, in collaboration with the Government Chief Information Officer and An Garda Síochána, together with technical partners from the Irish private sector (Expleo, Nearform, Information Security Assurance Services Ltd. (ISAS), and EdgeScan) and scientific partners from Science Foundation Ireland. Results from our testing programme have shown that the app was able to accurately detect 72% of close contacts using the Google Apple API.”
Supporting the development of the technology, a programme of public health research has been completed to ensure that the app is easy to use, protects privacy, and supports users over time. The findings of independent research the recent Lero study published this week by Science Foundation Ireland (SFI) found that 82% of the population said that they would be willing to install an app for contact tracing.
This work at a national level has been situated in an unprecedented global collaboration between governments, industry and the scientific community. The Irish app, designed employing the decentralised model, allows us to align fully with the privacy principles and public health guidance issued by the EU Commission, the OECD, WHO and the European Centre for Disease Prevention and Control.
CEO of the HSE, Mr Paul Reid said:
“The app will be an important part of our testing and tracing measures going forward. The app will augment the existing contact tracing operations by quickly notifying users if they have been a close contact of a confirmed case, enabling users to record symptoms, and providing a trusted source of information about COVID-19.”
ENDS
In line with the government’s roadmap for introducing a national mobile phone application to support contact tracing today the HSE and Department of Health have published a series of documents to provide insight into the decentralised model and privacy by design approaches that underlie the Covid Tracker App for Ireland.
Documents are available on the HSE Covid Tracker App page: www.hse.ie/!DW3Q7R.
A GitHub site for the Covid Tracker App has been set up and can be accessed here: github.com/HSEIreland.
A DPIA is an important document that clearly and transparently defines what data the app uses and how it protects that data in full compliance with GDPR. The DPIA for the Covid Tracker app has been finalised on the basis of feedback from the Attorney General’s Office and from the Office of the Data Protection Commissioner.
The source code contains the set of instructions used to make the app do its job. For people who can read the code (computer scientists/software developers) it provides complete transparency in relation to how the app functions.
The Product Explainer provides a detailed overview of what the app does and how it fits within the national effort to combat COVID-19.
Ireland has actively participated in the European eHealth Network and engaged with the DPT-3 group (Estonia, Switzerland, and Germany). The Covid Tracker App (both technically and in terms of privacy) is wholly in line with emerging international best practice and guidelines in relation to the use of mobile apps to support contact tracing for COVID-19 published by the European Centre for Disease Prevention and Control.
In addition to the results from the testing programme, showing that the app was able to accurately detect 72% of close contacts using the Google Apple API, based on the roll out of the Warn-App in Germany which also uses the Google Apple API and is currently achieving an 80% detection rate, we are confident that this can be further improved. Google and Apple are committed to continuing to increase the accuracy of the technology based on data received from testing in Ireland and other countries and the inclusion of other contextual information from devices, such as if a user is walking, in-transit, outside/inside etc. It is also important to note that the Google Apple API isn't solely focused on distance and time but is built on a risk model which can be tuned by HSE.
A programme of research to support the development of the app was completed through cross-governmental and cross-sectoral collaboration across HSE, the Irish Government Economics and Evaluation Services (IGEES), Department of Public Expenditure and Reform, and the Economic and Social Research Institute (ESRI) Behavioural Research Unit. The programmes included baseline research: an international literature review; survey analysis of smartphone ownership and consumer behaviour; and user preferences and experience. Final stage research involved a behavioural experiment (completed by the ESRI Behavioural Research Unit).
Our findings have shown that:
Collectively, this research demonstrates significant support for the app among the Irish people and provided insights to inform the design and development of the app in order to ensure that it is easy to use, protects privacy, and supports users over time.
As part of the development process, we have engaged with a wide variety of key stakeholder including:
Interoperability for contact tracing apps is a priority at EU level. EU citizens should be able to receive alerts of close contact with a possible case of COVID-19 in a secure and protected way, wherever they are in the EU, and whatever app they are using.
The EU has agreed guidelines to support the achievement of cross-border interoperability between tracing apps. Member States, including Ireland, that use a de-centralised architecture should be able to interoperate with other Member States using a similar architecture.
For Ireland, it is particularly important to find a solution to these challenges because of the amount of traffic north and south of the border and across the Irish Sea. Technical teams north and south have been engaged over the past number of weeks on how best to address solutions for interoperability. A number of options are being considered and there is growing confidence that interoperability will be achievable on an all-island basis.
The Department of Health and the HSE are in regular contact with counterparts in Northern Ireland and England and have provided them with full access to developments in the Irish app.