IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

COVID vaccine passports will fail unless government wins public trust, ICO warns

Data watchdog's chief Elizabeth Denham warns that it’s not good enough to claim ‘this is important, so trust us’

Plans to introduce COVID-19 vaccine certification won’t work in practice unless ministers make efforts to earn public trust, the head of the Information Commissioner’s Office (ICO) has claimed.

The government is considering developing a form of vaccine passport to help businesses and wider society safely open up as restrictions continue to ease, in the form of Digital ID that can be used to access services or gain entry into businesses.

Any such programme, however, whether developed by the government or a private company, will require the buy-in of the wider public in order to function as intended, the information commissioner Elizabeth Denham has warned. It also isn't good enough to simply expect trust or adoption based on what the wider social benefits may be.

“The obvious benefits of data-driven innovation in both the public and the private sectors rely on trust, and we’ve seen that clearly over the past year, from contact tracing apps to data-sharing to help vulnerable people who are shielding,” Denham said, speaking at the 2021 Data Protection Practioner's Conference.

“The example that’s dominating the headlines now of domestic vaccine certificates is another good example. The success of any COVID status scheme will rely on people trusting it, and that means having confidence in how the scheme would use their personal information.”

She claimed that although there are concerns, developers involved in building the contact tracing apps across the UK, including the devolved nations, had previously shown a keen interest in maintaining user privacy at every stage. There was also a real recognition of the value of public trust and engagement, she added, although that doesn't mean public trust can be taken for granted in future.

“There is simply not an option today for any organisation,” she continued, “public or private sector, to say "how we use data is complex, but this service is important, so just trust us". And that applies just as much to COVID status certificates, as it does to social media companies or app developers.”

For months, the government has been toying with the idea of rolling out a form of digital certificate that people must present to prove they’ve been vaccinated, or have recently returned a negative test, as restrictions lift.

While it’s a highly contentious measure, transport secretary Grant Shapps confirmed plans were underway to integrate this so-called vaccine passport feature into the NHS app. Digital privacy experts have previously urged caution due to concerns that any data collected may be used beyond the scope and timeline of the pandemic.

Related Resource

IT Pro 20/20: Understanding our complicated relationship with AI

The 16th issue of IT Pro 20/20 looks at the very human problems associated with artificial intelligence

IT Pro 20/20: Understanding our complicated relationship with AIDOWNLOAD NOW

Similar warnings were sounded in the lead up to the rollout of the NHS COVID-19 app as well as the manual NHS Test and Trace programme. The key charge was that uptake would not be high enough for these schemes to work if the public’s trust wasn’t secured.

The NHS COVID-19 app, for example, underwent a rocky development process and may have risked losing trust among the public as a result.

Ministers were keen at first on developing a centralised version rather than relying on the decentralised blueprint provided by Google and Apple. This is because the government’s original plans involved collecting location data to map areas with high infection rates. These efforts were abandoned, however, due to security issues and bugs, and the government instead opted to develop an app based around the decentralised model.

The manual NHS Test and Trace programme, too, raised eyebrows when it was launched without officials having conducted a data protection impact assessment (DPIA). Alleged shortcomings in the way the project has been managed have also resulted in privacy campaigners taking legal action against the programme.

Details around the incoming vaccine passport scheme are scarce, including when it may launch. However, it’s widely expected to be an important step in the government’s post-COVID roadmap.

Featured Resources

IT best practices for accelerating the journey to carbon neutrality

Considerations and pragmatic solutions for IT executives driving sustainable IT

Free Download

The Total Economic Impact™ of IBM Spectrum Virtualize

Cost savings and business benefits enabled by storage built with IBMSpectrum Virtualize

Free download

Using application migration and modernisation to supercharge business agility and resiliency

Modernisation can propel your digital transformation to the next generation

Free Download

The strategic CFO

Why finance transformation propels business value

Free Download


A new age of asset management
Active Directory

A new age of asset management

1 Jun 2022

Most Popular

The big PSTN switch off: What’s happening between now and 2025?

The big PSTN switch off: What’s happening between now and 2025?

13 Mar 2023
Why Amazon is cutting staff from AWS

Why Amazon is cutting staff from AWS

21 Mar 2023
Why – and how – IP can be the hero in your digital transformation success story

Why – and how – IP can be the hero in your digital transformation success story

6 Mar 2023