WIn for @OpenRightsGroup:
Government admits to ORG that England's test and trace programme 'breaks GDPR data law'
bbc.co.uk/news/technolog…
Government admits to ORG that England's test and trace programme 'breaks GDPR data law'
bbc.co.uk/news/technolog…
What happened here:
ORG was already concerned because the App had a late and bad Data Protection Impact Assessment.
When the manual Track and Trace programme was launched at the end of May, Politico reported no DPIA had been done.
politico.eu/article/uk-tes…
ORG was already concerned because the App had a late and bad Data Protection Impact Assessment.
When the manual Track and Trace programme was launched at the end of May, Politico reported no DPIA had been done.
politico.eu/article/uk-tes…
We wrote to the Government, which said it had done a DPIA on CTAS. They obfuscated to us, trying to imply doing a DPIA on one part of the system was enough.
CTAS is the 'Contact Tracing and Advisory Service' web portal, one of several pieces of software.
wired.co.uk/article/nhs-co…
CTAS is the 'Contact Tracing and Advisory Service' web portal, one of several pieces of software.
wired.co.uk/article/nhs-co…
Faced with this obfuscation, we threatened the Government with a Judicial Review over their decision *not* to conduct a DPIA.
As this was simple matter, we asked for them to confirm in a week if they had done one, and if not, to conduct it.
wired.co.uk/article/nhs-te…
As this was simple matter, we asked for them to confirm in a week if they had done one, and if not, to conduct it.
wired.co.uk/article/nhs-te…
Meanwhile stories like this emerged, contact tracers using social media groups to solve issues with their software, and sharing patient data on them:
thetimes.co.uk/edition/news/c…
thetimes.co.uk/edition/news/c…
Two weeks since the threat of a court case, and after six weeks of correspondence, the Government admitted they had not done a DPIA, and said they were now doing one.
IMPORTANT:
Since Test and Trace is operating unlawflly and data breaches appear to be taking place, the @ICOnews needs to step in, demand documents, and identify changes to re-establish public trust.
Time to end the “critical friend” policy and Regulate #GDPR.
Since Test and Trace is operating unlawflly and data breaches appear to be taking place, the @ICOnews needs to step in, demand documents, and identify changes to re-establish public trust.
Time to end the “critical friend” policy and Regulate #GDPR.
GOVT SPIN:
The Govt is telling journalists that there is “no evidence” of “unlawful data processing”.
What their letter (linked here) says is that the *programme* was operating unlawfully.
openrightsgroup.org/press-releases…
The Govt is telling journalists that there is “no evidence” of “unlawful data processing”.
What their letter (linked here) says is that the *programme* was operating unlawfully.
openrightsgroup.org/press-releases…
Here is the Government’s admission that they needed to do a DPIA at para 22:
openrightsgroup.org/app/uploads/20…
openrightsgroup.org/app/uploads/20…
And let’s make this absolutely clear:
This admission was obtained only as the result of legal correspondence and the threat of Judicial Review.
For which @RaviNa1k and @A__W______O deserve the credit—thank you for making this happen!
This admission was obtained only as the result of legal correspondence and the threat of Judicial Review.
For which @RaviNa1k and @A__W______O deserve the credit—thank you for making this happen!
• • •
Missing some Tweet in this thread? You can try to
force a refresh
