Protect our health
and protect our rights.

• ▼ 1. One goal: controlling the virus.
  The app and the data it collects may only be used to control the virus. Use of the app should facilitate contact tracing, in other words, it should be used to improve the knowledge and protection of individuals. Any other use must be prohibited and prevented. For example, the app may not be used for policy enforcement, nor for determining whether someone is eligible for any type of reimbursement or access to care, nor for any type of commercial purposes.
• ▼ 2. Based on scientific insight and demonstrably effective.
  The use of the app and the data collected by it must be based on scientific knowledge and demonstrably support controlling the virus. It must be clear in advance which factors are relevant for the effectiveness of the app, such as the percentage of the population that must use it. The app must have been tested beforehand by a small group of users, demonstrating that the app is necessary, effective and proportional.
• ▼3. Proven to be reliable and based on expertise.
  The app is developed on the basis of the expertise of, and under the supervision of independent experts, the same way that is already happening with respect to the medical aspects of the fight against the virus. Beside this expertise, public accountability and transparency of the solution are required, so as to keep all parties involved focused on the effectiveness of the solution, the protection of human rights and the foundations of democracy. During the development and lifetime of the application, we must never be dependent on a single party or system. The source code of the application and other parts of the infrastructure must be publicly available under a free software license, in order to allow everyone to verify the operation of the system. Furthermore attention should be paid to the verifiability of the application to be used.
• ▼ 4. The use of the application is by definition temporary.
  The app may only be used for the abovementioned purpose and for a predetermined period. This period can only be extended if it can be demonstrated to be necessary for the app to be used for a longer period of time. Once the app is no longer effective or necessary the rollout of the application is reversed and the data deleted. This may also be necessary in the case of social upheaval, for example concerning security or possible misuse of the application. The application can be reversed by undoing the functionality of the app and deleting the registered data.
• ▼5. No persons may be identified.
  It must be impossible to de-anonymize the user data collected by the app, even when these data are combined with other data. This means that the system can not be built on the use of identification numbers of hardware or other identifiable data, such as the "Bluetooth Device Address".
• ▼6. Minimal use of data.
  The app stores as few data as possible for the minimum amount of time. That means, for example, that the app does not need to register data about someone's location, but only the identification number of other users nearby. Neither is it necessary to register the precise time of such meeting. To be able to delete the data on time, it is only necessary to register a date of registration and not a timestamp.
• ▼7. No central storage of personal data.
  In principle all data processing happens on the user's phone. As an example, this means that the process of assessing whether a user has recently been in contact with an infected person, must happen locally on the user's phone. Should there be a need to share data, for example after an infection has been diagnosed, then this must only happen with voluntary, explicit and informed consent by the user. The data that does leave the user's phone, must not be traceable to the user in any way.
• ▼8. Secure and protected from abuse.
  It is important that the confidentiality and integrity of the data is protected. This can be achieved through the use of encryption and other security technologies. At times more may be needed. Imagine for example a situation in which the app notifies other users when an infection has been diagnosed. Encrypted or not, that transmission of data alone is sufficient to deduce that the user in question has potentially been infected.
• ▼9. User friendly and accessible.
  The application is developed such that it is usable for anyone (in a particular region) who wants to do so. Therefore, it should consider, for example, people who do not have access to a smartphone, are unable to speak the dominant language of their region or need additional accesibility features.
• ▼ 10. Never through coercion by governments or third parties.
  The use of the app must in no way be forced upon anyone. If evidence shows that the app is necessary, it is important that it is used by a large percentage of the population. This is only possible if the fundamental rights of the user are respected. This includes the right to not install the app. The government should not encourage the use of the application through offers of financial rewards. In addition, it must be possible to temporarily disable or permanently remove the application. There must not be any negative consequences for those who choose not to use the application. This means that third parties such as airlines, insurers, or restaurants should not be allowed to impose conditions on their clients related to the use of the app. In particular, it should be prohibited for employers to require or incentivize their employees to use the app, or for educational facilities to do the same with their students.

Contact