COVID vaccine passports will fail unless government wins public trust, ICO warns

Data watchdog's chief Elizabeth Denham warns that it’s not good enough to claim ‘this is important, so trust us’

Plans to introduce COVID-19 vaccine certification won’t work in practice unless ministers make efforts to earn public trust, the head of the Information Commissioner’s Office (ICO) has claimed.

The government is considering developing a form of vaccine passport to help businesses and wider society safely open up as restrictions continue to ease, in the form of Digital ID that can be used to access services or gain entry into businesses.

Any such programme, however, whether developed by the government or a private company, will require the buy-in of the wider public in order to function as intended, the information commissioner Elizabeth Denham has warned. It also isn't good enough to simply expect trust or adoption based on what the wider social benefits may be.

“The obvious benefits of data-driven innovation in both the public and the private sectors rely on trust, and we’ve seen that clearly over the past year, from contact tracing apps to data-sharing to help vulnerable people who are shielding,” Denham said, speaking at the 2021 Data Protection Practioner's Conference.

“The example that’s dominating the headlines now of domestic vaccine certificates is another good example. The success of any COVID status scheme will rely on people trusting it, and that means having confidence in how the scheme would use their personal information.”

She claimed that although there are concerns, developers involved in building the contact tracing apps across the UK, including the devolved nations, had previously shown a keen interest in maintaining user privacy at every stage. There was also a real recognition of the value of public trust and engagement, she added, although that doesn't mean public trust can be taken for granted in future.

“There is simply not an option today for any organisation,” she continued, “public or private sector, to say "how we use data is complex, but this service is important, so just trust us". And that applies just as much to COVID status certificates, as it does to social media companies or app developers.”

For months, the government has been toying with the idea of rolling out a form of digital certificate that people must present to prove they’ve been vaccinated, or have recently returned a negative test, as restrictions lift.

While it’s a highly contentious measure, transport secretary Grant Shapps confirmed plans were underway to integrate this so-called vaccine passport feature into the NHS app. Digital privacy experts have previously urged caution due to concerns that any data collected may be used beyond the scope and timeline of the pandemic.

Related Resource

IT Pro 20/20: Understanding our complicated relationship with AI

The 16th issue of IT Pro 20/20 looks at the very human problems associated with artificial intelligence

IT Pro 20/20: Understanding our complicated relationship with AIDOWNLOAD NOW

Similar warnings were sounded in the lead up to the rollout of the NHS COVID-19 app as well as the manual NHS Test and Trace programme. The key charge was that uptake would not be high enough for these schemes to work if the public’s trust wasn’t secured.

The NHS COVID-19 app, for example, underwent a rocky development process and may have risked losing trust among the public as a result.

Ministers were keen at first on developing a centralised version rather than relying on the decentralised blueprint provided by Google and Apple. This is because the government’s original plans involved collecting location data to map areas with high infection rates. These efforts were abandoned, however, due to security issues and bugs, and the government instead opted to develop an app based around the decentralised model.

The manual NHS Test and Trace programme, too, raised eyebrows when it was launched without officials having conducted a data protection impact assessment (DPIA). Alleged shortcomings in the way the project has been managed have also resulted in privacy campaigners taking legal action against the programme.

Details around the incoming vaccine passport scheme are scarce, including when it may launch. However, it’s widely expected to be an important step in the government’s post-COVID roadmap.

Featured Resources

Next-generation time series: Forecasting for the real world, not the ideal world

Solve time series problems with AI

Free download

The future of productivity

Driving your business forward with Microsoft Office 365

Free download

How to plan for endpoint security against ever-evolving cyber threats

Safeguard your devices, data, and reputation

Free download

A quantitative comparison of UPS monitoring and servicing approaches across edge environments

Effective UPS fleet management

Free download

Recommended

How to manage people successfully from a distance
Business strategy

How to manage people successfully from a distance

27 Oct 2021
Phishing emails target victims with fake vaccine passport offer
cyber crime

Phishing emails target victims with fake vaccine passport offer

21 Sep 2021
Oracle teams with Oxford University for rapid detection of COVID-19 variants
data processing

Oracle teams with Oxford University for rapid detection of COVID-19 variants

20 Sep 2021
Podcast transcript: Digital stagnation in a post-COVID world
digital transformation

Podcast transcript: Digital stagnation in a post-COVID world

27 Aug 2021

Most Popular

UK spy agencies supercharge espionage efforts with AWS data deal
cloud computing

UK spy agencies supercharge espionage efforts with AWS data deal

26 Oct 2021
Best Linux distros 2021
operating systems

Best Linux distros 2021

11 Oct 2021
Cryptocurrency: Should you invest?
cryptocurrencies

Cryptocurrency: Should you invest?

27 Oct 2021