Inherent Privacy Limitations of Decentralized Contact Tracing Apps

J Am Med Inform Assoc. 2020 Jun 25;ocaa153. doi: 10.1093/jamia/ocaa153. Online ahead of print.

Abstract

Recently, there have been many efforts to use mobile apps as an aid in contact tracing to control the spread of the SARS-CoV-2 (Covid-19) pandemic. However, although many apps aim to protect individual privacy, the very nature of contact tracing must reveal some otherwise protected personal information. Digital contact tracing has endemic privacy risks that cannot be removed by technological means, and which may require legal or economic solutions. In this brief communication, we discuss a few of these inherent privacy limitations of any decentralized automatic contact tracing system.

Keywords: Covid-19; contact tracing; phone app; privacy.