The European Data Protection Board weighs in on location data and contact tracing apps.

  • don’t use personal data if you don’t have to
  • collect only the minimum amount
  • clearly define the controller, and the purposes
  • use encryption
  • apply robust safeguards
  • delete after when no longer necessary or when the crisis is over

Read my detailed analysis in this client alert.