References
- 2020a. “App Tracks Your Location #16 (closed).” Github. nhsx/ COVID-19-app-Android-BETA.
- Ada Lovelace Institute. 2020. “Exit through the App Store? A Rapid Evidence Review on the Technical Considerations and Societal Implications of Using Technology to Transition from the Covid-19 Crisis.” Accessed 30 May 2020. https://www.adalovelaceinstitute.org/exit-through-the-app-store-how-the-uk-government-should-use-technology-to-transition-from-the-covid-19-global-public-health-crisis/.
- Article 29 Working Party. 2007. “Working Document on the Processing of Personal Data Relating to Health in Electronic Health Records (EHR).” WP 131.
- Article 29 Working Party. 2018. “Guidelines on Consent under Regulation 2016/679.” WP 259 rev.01.
- Belgian Data Protection Authority. 2020. “Le COVID-19 et l'utilisation d'applications de santé 31 March 2020.” Accessed 30 May 2020. https://www.autoriteprotectiondonnees.be/le-covid-19-et-lutilisation-dapplications-de-sante. Summarised in English. https://www.huntonprivacyblog.com/2020/04/07/belgian-dpa-statement-regarding-health-related-apps-in-the-context-of-covid-19/.
- BEUC (The European Consumer Organisation). 2018. “Consumer Groups across Europe File Complaints against Google for Breach of GDPR” November 27, Accessed 29 June 2020 https://www.beuc.eu/publications/consumer-groups-across-europe-file-complaints-against-google-breach-gdpr/html.
- Bock, Kirsten, Christian Ricardo Kühne, Rainer Mühlhoff, Mėto R Ost, Jörg Paohle, and Rainer Rehak. 2020. “Data Protection Impact Assessment for the Corona App.” Available at SSRN 3588172. Accessed on 29 June 2020 https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3588172.
- Boiten, Eerke. 2020. “Why We Need to Know More about the UK Government’s COVID-19 Data Project – and the Companies Working on it.” The Conversation, June 24. Accessed 29 June 2020 https://theconversation.com/why-we-need-to-know-more-about-the-uk-governments-covid-19-data-project-and-the-companies-working-on-it-141078.
- Boiten, Eerke, Mark Ryan, and Alan Woodward. 2020. “Joint Statement to the Department of Health and Social Care.” April 29. Accessed 29 June 2020, https://github.com/CCTPS/UK.
- Bradford, Laura R, Mateo Aboy, and Kathleen Liddell. 2020. “COVID-19 Contact Tracing Apps: A Stress Test for Privacy, the GDPR and Data Protection Regimes.” Journal of Law and the Biosciences lsaa034.
- Clarke, Laurie. 2020. “Government Finally Publishes NHS Contracts with Palantir, Faculty and Big Tech.” NewStatement Tech, June 5. Accessed 29 June 2020 https://tech.newstatesman.com/coronavirus/nhs-contracts-palantir-faculty-microsoft-google.
- CNIL (Commission Nationale de l’Informatique et des Libertés). 2019. “Déliberation of the restricted committee san-2019-001 of 21 january 2019 pronouncing a financial sanction against google llc.”
- CNIL (Commission Nationale de l’Informatique et des Libertés). 2020a. “ Délibération no 2020-046 du 24 avril 2020 portant avis sur un projet d’application mobile dénommée ‘stopcovid’.” Accessed 30 May 2020. https://www.cnil.fr/sites/default/files/atoms/files/deliberation_du_24_avril_2020_portant_avis_sur_un_projet_dapplication_mobile_stopcovid.pdf.
- CNIL (Commission Nationale de l’Informatique et des Libertés). 2020b. “Publication de l’avis de la CNIL sur le projet d’application mobile ‘stopcovid’.” Accessed 30 May 2020. https://www.cnil.fr/fr/la-cnil-rend-son-avis-sur-les-conditions-de-mise-en-oeuvre-de-lapplication-stopcovid.
- Cohen, Julie E. 2019. Between Truth and Power: The Legal Constructions of Informational Capitalism. New York: Oxford University Press.
- Coldicutt, Rachel. 2020. “Open Letter: Contact Tracking and nhsx.” Medium, March 23. Accessed 30 May 2020. https://medium.com/@rachelcoldicutt/open-letter-contract-tracking-and-nhsx-e503325b2703.
- Conseil d’Etat. 2020. “Société Google LLC: Decision n. 430810.” June 19.. Accesssed 29 June 2020. https://www.conseil-etat.fr/ressources/decisions-contentieuses/dernieres-decisions-importantes/conseil-d-etat-19-juin-2020-sanction-infligee-a-google-par-la-cnil.
- DHSC (Department of Health and Social Care). 2020a. “Coronavirus Test, Track and Trace Plan Launched on Isle of Wight.” Accessed 30 March 2020. https://www.gov.uk/government/news/coronavirus-test-track-and-trace-plan-launched-on-isle-of-wight?utm_source=a173ba14-521f-4a3e-9d0a-78113de8d648&utm_medium=email&utm_campaign=govuk-notifications&utm_content=daily.
- DHSC (Department of Health and Social Care). 2020b. “Letter to the Joint Committee on Human Rights.” May 21.
- Downey, Andrea. 2020. “Nhsx Working on Coronavirus Contact Tracking App.” Digital Health, March 20. Accessed 30 May 2020. https://www.digitalhealth.net/2020/03/nhsx-coronavirus-contact-tracking-app/.
- Editorial. 2018. “The Guardian View on Big Data and Insurance: Knowing Too Much.” The Guardian, September 27.. Accessed 30 May 2020. https://www.theguardian.com/commentisfree/2018/sep/27/the-guardian-view-on-big-data-and-insurance-knowing-too-much.
- EDPB (European Data Protection Board). 2020a. “Eighteenth EDPB Plenary Session.” Accessed 30 May 2020. https://edpb.europa.eu/news/news/2020/eighteenth-edpb-plenary-session_en.
- EDPB (European Data Protection Board). 2020b. “Guidelines 05/2020 on Consent under Regulation 2016/679.” Version 1.0. Accessed 30 May 2020. https://edpb.europa.eu/sites/edpb/files/files/file1/edpb_guidelines_202005_consent_en.pdf.
- EDPB (European Data Protection Board). 2020c. “Statement of the EDPB Chair on the Processing of Personal Data in the Context of the Covid-19 Outbreak.” Accessed 30 May 2020. https://edpb.europa.eu/news/news/2020/statement-edpb-chair-processing-personal-data-context-covid-19-outbreak_pt.
- EDPB (European Data Protection Board). 2020d. “Statement on the Data Protection Impact of the Interoperability of Contact Tracing Apps.” June 16.. Accessed 29 June 2020 https://edpb.europa.eu/sites/edpb/files/files/file1/edpb_statementinteroperabilitycontacttracingapps_en_0.pdf.
- Edwards, Lilian, Michael Veale, Orla Lynskey, Rachel Coldicutt, Nora N. Loideain, Frederike Kaltheuner, Marion Oswald, et al. 2020. “The Coronavirus (Safeguards) Bill 2020: Proposed Protections for Digital Interventions and in Relation to Immunity Certificates.” Version 5.1. Accessed 30 May 2020. https://osf.io/preprints/lawarxiv/yc6xu/.
- Evans, Rob, Juliette Garside, Joseph Smith, and Pamela Dundan. 2020. “Firms Given £1bn of State Contracts without Tender in Covid-19 Crisis.” The Guardian, May 15.. https://www.theguardian.com/world/2020/may/15/firms-given-1bn-of-state-contracts-without-tender-in-covid-19-crisis.
- Franco, Marisa. 2019. “Palantir has No Place at Berkeley: They Help Tear Immigrant Families Apart.” The Guardian, May 31.. Accessed 30 May 2020. https://www.theguardian.com/commentisfree/2019/may/31/palantir-berkeley-immigrant-families-apart.
- Fry, Hannah. 2018. Hello World: How to be Human in the Age of the Machine, Doubleday, 2018, and interview at https://www.noted.co.nz/tech/tech-tech/how-algorithms-can-go-rogue-whos-at-the-wheel.
- FTC (Federal Trade Commission). 2012. “Google Will Pay $22.5 Million to Settle FTC Charges it Misrepresented Privacy Assurances to Users of Apple's Safari Internet Browser.” August 9.. Accessed 29 June 2020 https://www.ftc.gov/news-events/press-releases/2012/08/google-will-pay-225-million-settle-ftc-charges-it-misrepresented.
- FTC (Federal Trade Commission). 2014. “Data Brokers. A Call for Transparency and Accountability.” Accessed 30 May 2020. https://www.ftc.gov/news-events/press-releases/2014/05/ftc-recommends-congress-require-data-broker-industry-be-more.
- FTC (Federal Trade Commission). 2016. “Mobile Health App Developers: FTC Best Practices.” April 2016. Accessed 30 May 2020. https://www.ftc.gov/tips-advice/business-center/guidance/mobile-health-app-developers-ftc-best-practices.
- Google Inc. v Vidal-Hall, Hann, Bradshaw, Court of Appeal, 27 March 2015, [2015] EWCA Civ 311.
- Gould, Matthew, Indra Joshi, and Ming Tang. 2020. “The Power of Data in a Pandemic.” Accessed 30 May 2020. https://healthtech.blog.gov.uk/2020/03/28/the-power-of-data-in-a-pandemic/.
- Guinchard, Audrey. 2018. “Transforming the Computer Misuse act 1990 to Support Vulnerability Research? Proposal for a Defence for Hacking as a Strategy in the Fight Against Cybercrime.” Journal of Information Rights, Policy and Practice 2 (2): 1–31. doi: 10.21039/irpandp.v2i2.36
- Hern, Alex. 2020. “Apple and Google not Told of UK Plans to Use their Tech with NHS App.” The Guardian, June 19. Accessed 29 June 2020. https://www.theguardian.com/world/2020/jun/19/apple-and-google-not-told-of-uk-plans-to-use-their-tech-with-nhs-app.
- House of Commons Science and Technology Committee. 2020. “Oral Evidence: UK Science, Research and Technology Capability and Influence in Global Disease Outbreaks, HC 136.” Questions 302-384. April 28. Accessed 30 May 2020. https://committees.parliament.uk/work/91/uk-science-research-and-technology-capability-and-influence-in-global-disease-outbreaks/publications/oral-evidence/.
- ICO (Information Commissionner Office). “Guidance on GDPR.” Accessed 30 May 2020. https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr /.
- ICO (Information Commissionner Office). 2019. “Vote Leave Limited.” March 19. Accessed 29 June 2020. https://ico.org.uk/action-weve-taken/enforcement/vote-leave-limited/.
- ICO (Information Commissionner Office). 2020a. “Covid-19 Contact Tracing: Data Protection Expectations on App Development.” May 4. Accessed 30 May 2020. https://ico.org.uk/media/for-organisations/documents/2617676/ico-contact-tracing-recommendations.pdf.
- ICO (Information Commissionner Office). 2020b. “ICO Statement on Adtech Work.” May 7. Accessed 29 June 2020. https://ico.org.uk/about-the-ico/news-and-events/news-and-blogs/2020/05/ico-statement-on-adtech-work/.
- Joint Committee on Human Rights. 2019. “The Right to Privacy and the Digital Revolution.” Accessed 30 May 2020. https://publications.parliament.uk/pa/jt201919/jtselect/jtrights/122/122.pdf.
- Joint Committee on Human Rights. 2020a. “Human Rights and the Government’s Response to Covid-19: Digital Contact Tracing.” Accessed 30 May 2020. https://committees.parliament.uk/committee/93/human-rights-joint-committee/news/146351/report-on-the-contact-tracing-app-published/.
- Joint Committee on Human Rights. 2020b. “Oral Evidence (Virtual Proceeding): The Government’s Response to Covid-19: Human Rights Implications, HC 265.” Questions 1–9, Accessed 30 May 2020. https://committees.parliament.uk/committee/93/human-rights-joint-committee/publications/oral-evidence/.
- Joint Committee on Human Rights. 2020c. “Oral Evidence (Virtual Proceeding): The Government’s Response to Covid-19: Human Rights Implications, HC 265.” Questions 10–14. Accessed 30 May 2020. https://committees.parliament.uk/committee/93/human-rights-joint-committee/publications/oral-evidence/.
- Joint Committee on Human Rights. 2020d. “Oral Evidence (Virtual Proceeding): The Government’s Response to Covid-19: Human Rights Implications, HC 265.” Questions 15–26. Accessed 30 May 2020. https://committees.parliament.uk/committee/93/human-rights-joint-committee/publications/oral-evidence/.
- Kapczynski, A. 2020. “The Law of Informational Capitalism. Books Review.” The Yale Law Journal 129 (5): 1460–1515.
- Levy, Ian. 2020. “The Security Behind the NHS Contact Tracing App.” NCSC. Accessed 30 May 2020. https://www.ncsc.gov.uk/blog-post/security-behind-nhs-contact-tracing-app.
- Lewis, Paul, David Conn, and David Pegg. 2020. “UK Government Using Confidential Patient Data in Coronavirus Response.” The Guardian. Accessed 30 May 2020. https://www.theguardian.com/world/2020/apr/12/uk-government-using-confidential-patient-data-in-coronavirus-response.
- Lewis, Paul, and David Pegg. 2020. “Google Executive Took Part in Sage Meeting, Tech Firm Confirms.” The Guardian, April 30. Accessed 30 May 2020. https://www.theguardian.com/world/2020/apr/30/google-executive-took-part-in-sage-meeting-coronavirus-tech-firm-confirms.
- Lloyd v Google LLC, Court of Appeal 2 October 2019 [2019] EWCA Civ 1599.
- Menn, Joseph. 2019. “Microsoft Turned Down Facial-recognition Sales on Human Rights Concerns.” UK Reuters, April 17. Accessed 30 May 2020. https://uk.reuters.com/article/uk-microsoft-ai/microsoft-turned-down-facial-recognition-sales-on-human-rights-concerns-idUKKCN1RS2FY.
- Molnar, Petra. 2019. “Technology on the Margins: AI and Global Migration Management from a Human Rights Perspective.” Cambridge International Law Journal 8 (2): 305–330. doi: 10.4337/cilj.2019.02.07
- Muller, Catelijne, et al. 2020. “Letter to Ministry of General Affairs, Ministry of Healtah, Well-being and Sport, and Ministery Justice and Legal Protection.” April 13. Accessed 30 May 2020. http://allai.nl/wp-content/uploads/2020/04/Online-version-Letter-to-President-Rutte-Ministers-De-Jonge-Van-Rijn-Grapperhaus-re.-COVID-19-apps.pdf.
- Murphy, Simon, Dan Sabbagh, and Alex Hern. 2020. “Piloted in May, Ditched in June: The Failure of England’s Covid-19 App.” The Guardian, June 18. Accessed 29 May 2020. https://www.theguardian.com/world/2020/jun/18/piloted-in-may-ditched-in-june-the-failure-of-englands-covid-19-app.
- Networks, ISCI – UC Berkeeley and IMDEA. 2020. “The Haystack Project.” Accessed 30 May 2020. https://www.haystack.mobi.
- Nguyen, Chuong. 2018. ‘Privacy-focused Browser Brave Sues Google, Claims Breach of Europe’s GDPR Rules.” Digital Trends, September 13. Accessed 29 June 2020. https://www.digitaltrends.com/computing/brave-gdpr-complaint-google-privacy-violations/.
- NHS. 2020. “Data Protection Impact Assessment: NHS COVID-19 Data Store.” version 1.4. Accessed 29 June 2020. https://www.england.nhs.uk/publication/data-protection-impact-assessment-nhs-covid-19-data-store/.
- NHS X. 2020a. “Data Protection Impact Assessment. NHS Covid-19 App Pilot Live Release Isle of Wight.” Accessed 30 May 2020. https://faq.covid19.nhs.uk/20200505a%20DPIA%20Risk%20Log%20Covid%20Proximity%20App.pdf.
- NHS X. 2020b. “Faq. Why do Android Phones Require Users to Turn on Location?” Accessed 30 May 2020. https://faq.covid19.nhs.uk/article/KA-01037/en-us.
- NHS X. 2020c. “Source Code of the Digital Contact Tracing Covid-19 App.” Accessed 30 May 2020. https://github.com/nhsx.
- Norwegian Institute of Public Health. 2020. NIPH Stops Collection of Personal Data in Smittestopp.” June 15. Accessed 29 June 2020. https://www.fhi.no/en/news/2020/niph-stops-collection-of-personal-data-in-smittestopp/.
- NOYB. 2020. “Google: If You don’t Want us to Track your Phone – Just Get Another Tracking ID!.” May 13. Accessed 30 May 2020. https://noyb.eu/en/complaint-filed-against-google-tracking-id.
- OpenDemocracy. 2020. “Under Pressure, UK Government Releases NHS COVID Data Deals with Big Tech.” June 5. Accessed 29 June 2020. https://www.opendemocracy.net/en/under-pressure-uk-government-releases-nhs-covid-data-deals-big-tech/.
- Pegg, David. 2020. “What was Exercise Cygnus and What did it Find? The Guardian, May 7. Accessed 30 May 2020. https://www.theguardian.com/world/2020/may/07/what-was-exercise-cygnus-and-what-did-it-find.
- Roth, Andrew, Stephanie Kirchgaessner, Daniel Boffey, Oliver Holmes, and Helen Davidson. 2020. “Growth in Surveillance May be Hard to Scale Back after Pandemic, Experts Say.” The Guardian, April 14. Accessed 29 June 2020. https://www.theguardian.com/world/2020/apr/14/growth-in-surveillance-may-be-hard-to-scale-back-after-coronavirus-pandemic-experts-say.
- Ruhaak, Anouk. 2020. “Open Letter to the Department of Health and Social Care.” Medium, May 18. Accessed 29 June 2020. https://medium.com/@anoukruhaak/open-letter-b7cb79832064.
- Ryder Qc, Matthew, Edward Crazen, Srathy Gayatri, and Ravi Naik. 2020. “Covid-19 & Tech Responses: Legal Opinion.” April 30. Accessed 30 May 2020. https://coronavirus.blackstonechambers.com/legal-opinion-technological-responses-covid-19-pandemic/.
- Smith, Brian. 2018. “Facial Recognition: It’s Time for Action.” Microsoft, December 6. Accessed 30 May 2020. https://blogs.microsoft.com/on-the-issues/2018/12/06/facial-recognition-its-time-for-action/.
- Strauss, Marine. 2020. “Belgium will not Use Coronavirus Contact Tracing Apps – Minister.” UK Reuters, April 24. Accessed 30 May 2020. https://uk.reuters.com/article/uk-health-coronavirus-belgium-tracing/belgium-will-not-use-coronavirus-contact-tracing-apps-minister-idUKKCN2261S9.
- Surveillance Camera Commissioner. 2020. “Data Protection Impact Assessment Template.” May 21. Accessed 30 May 2020. https://www.gov.uk/government/publications/data-protection-impact-assessments-for-surveillance-cameras.
- Swedish Consumer Group. 2018 . “Every Step You Take. How Deceptive Design Let Google Track Users 24/7.” November 27. https://www.forbrukerradet.no/undersokelse/no-undersokelsekategori/every-step-you-take.
- Vallina-Rodriguez, Narseo, and Srikanth Sundaresan. 2017. “7 in 10 Smartphone Apps Share Your Data With Third-party Services.” The Conversation, May 30. Accessed 30May 2020. https://theconversation.com/7-in-10-smartphone-apps-share-your-data-with-third-party-services-72404.
- Vallina-Rodriguez, Narseo, Srikanth Sundaresan, Abbas Razaghpanah, Rishab Nithyanand, Mark Allman, Christian Kreibich, and Phillipa Gill. 2016. “Tracking the Trackers: Towards Understanding the Mobile Advertising and Tracking Ecosystem.” arXiv preprint arXiv:1609.07190.
- Veale, Michael. 2020. “Analysis of the NHSX Contact Tracing App ‘Isle of Wight’ Data Protection Impact Assessment.” LawArXiv, May 9. Accessed 29 June 2020. https://osf.io/preprints/lawarxiv/6fvgh.
- Waldman, Peter, Lizette Chapman, and Jordan Robertson. 2018. “Peter Thiel’s Data-mining Company is Using War on Terror Tools to Track American Citizens. The Scary Thing? Palantir is Desperate for New Customers.” Bloomsberg Business Week, April 19. Accessed 30 May 2020. https://www.bloomberg.com/features/2018-palantir-peter-thiel/.
- Zuboff, Shoshana. 2019. The Age of Surveillance Capitalism: The Fight for a Human Future at the New Frontier of Power. London: Profile Books.