The European Data Protection Board weighs in on location data and contact tracing apps.
- don’t use personal data if you don’t have to
- collect only the minimum amount
- clearly define the controller, and the purposes
- use encryption
- apply robust safeguards
- delete after when no longer necessary or when the crisis is over