{"id":40226,"date":"2020-10-08T09:28:50","date_gmt":"2020-10-08T01:28:50","guid":{"rendered":"http:\/\/www.upgrademag.com\/web\/?p=40226"},"modified":"2020-10-08T09:28:52","modified_gmt":"2020-10-08T01:28:52","slug":"contact-tracing-considerations-for-organizations","status":"publish","type":"post","link":"http:\/\/www.upgrademag.com\/web\/2020\/10\/08\/contact-tracing-considerations-for-organizations\/","title":{"rendered":"Contact tracing considerations for organizations"},"content":{"rendered":"\n

By Sumit Bansal
Sophos Managing Director, ASEAN<\/em><\/strong><\/p>\n\n\n\n

Contact tracing is a key pillar in the efforts of many countries to manage the COVID-19 pandemic, along with mass testing and patient treatment. \u00a0<\/strong><\/p>\n\n\n\n

As more workplaces reopen in the Philippines, we\u2019ve seen increased interest in contact tracing initiatives, as fears linger due to the current number of COVID-19 cases in the country.\u00a0 If an organization is informed that an employee, customer or visitor to their facilities has tested positive to COVID-19, having accurate data on who has come into contact with these individuals\u00a0 helps to stop the spread of the virus as it allows these people to be tested and to self-isolate immediately.<\/p>\n\n\n\n

While contact tracing is helpful in stemming the spread of the virus, smaller organizations with limited resources may feel intimidated by the thought they need advanced technology backed up by a lot of work to be effective. <\/p>\n\n\n\n

Are apps the way to go? <\/strong><\/p>\n\n\n\n

Many countries around the world have implemented smartphone apps for contact tracing. However, these apps really only offer exposure notification not actual contact tracing. <\/p>\n\n\n\n

True contact tracing involves identifying where exposure and transmission may have occurred by understanding the patterns of recent movements, by those who have been confirmed positive for COVID-19.<\/p>\n\n\n\n

Most apps currently deployed only let you know if you were in the proximity to another app user who has been confirmed to have the virus. These apps rely on Bluetooth radio technology to estimate the distance between different people\u2019s devices, particularly in wide, open spaces. If you were confirmed to have been infected, public health authorities can us data from the app to notify other uses of the app that they were within two meters (~6 feet) of you for at least 15 minutes <\/p>\n\n\n\n

Unfortunately, as Bluetooth radio waves travel quite efficiently through barriers and can\u2019t identify those who were wearing masks, face shields, and other personal protective equipment, they might give widespread false positive notifications. Aside from causing undue alarm, this may also make the process inaccurate and inefficient. Lastly, but just as importantly, even with Apple and Google offering support for contact tracing, many people in markets like the Philippines do not have smartphones, so we can expect cases to fall through the cracks untracked.  <\/p>\n\n\n\n

Define the approach before the app <\/strong><\/p>\n\n\n\n

Although these apps aren\u2019t totally useless, as the information they provide can still help shape public health responses, we can\u2019t solely rely on them to provide the data required for effective contact tracing. Organizations are therefore conducting their own contact tracing efforts, which requires embracing the right approach to protecting the data they collect.. <\/p>\n\n\n\n

The Philippines\u2019 National Privacy Commission (NPC) is on the right track with the guidelines it recently issued for organizations defining their contact tracing approach. While it highlights the primacy of public health considerations, it also urges the public to be mindful of the provisions of the Data Privacy Act of 2012 (DPA), which remain in effect.<\/p>\n\n\n\n

The NPC encourages organizations to only collect what is necessary for the sole purpose of contact tracing. It also encourages companies to post easy-to-understand privacy notices, either on a highly visible area or on the initial pages of digital platforms, before personal data is collected. <\/p>\n\n\n\n

The government agency also states that organizations need adequate security measures to protect personal data against any accidental or unlawful access or disclosure. The collected data should only be retained for the period allowed by current government mandates, after which, it should be disposed of in a way that prevents unauthorized access or disclosure.<\/p>\n\n\n\n

As these are unprecedented times, understandably, many organizations are still figuring out what compliance to these guidelines looks like. However, we are already seeing room for improvement. While tech-powered options may not always be possible, businesses cannot simply place log-books at the entrance of their facilities and ask customers and visitors to input their full names, addresses, and contact details as they come in. Not only does this turn the sign-in area into a high-contact surface, it also exposes visitors\u2019 personal information to fellow visitors and random passersby.\u00a0 <\/p>\n\n\n\n

Instead, organizations should explore physical or digital collection forms that do not expose others\u2019 personal data, then store them in secure systems or locations. This information should not be entrusted to a third-party or stored offsite. Employees should also be given the necessary training in data collection, protection and privacy.\u00a0<\/p>\n\n\n\n

Protecting private data amid public health concerns<\/strong><\/p>\n\n\n\n

Even, or perhaps, especially in these times, organizations are encouraged to devote the same care and attention they do to their visitors and customers\u2019 digital safety as they do to their physical safety. Unfortunately, cyber-criminals have no qualms about exploiting the pandemic to victimize innocent people. In fact, as of May this year, SophosLabs has already identified over 1,885 malicious domains using \u201ccorona\u201d or \u201ccovid\u201d in their names. <\/p>\n\n\n\n

We\u2019re also seeing an increase in emails with attached malware installers disguised as information on the pandemic, suspicious sites peddling medicines and equipment, and spam callers looking to trick people into sending money electronically or giving access to financial records. Such attacks can cause real harm on people\u2019s already-vulnerable lives and livelihoods. <\/p>\n\n\n\n

In light of what we\u2019re all facing right now, protecting our visitors\u2019 and customers\u2019 personal information is something we need to take even more seriously, not only out of compliance with global and local cybersecurity and data privacy standards, but out of our sense of responsibility and compassion for the people we serve and work with.\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"

If an organization is informed that an employee, customer or visitor to their facilities has tested positive to COVID-19, having accurate data on who has come into contact with these individuals helps to stop the spread of the virus as it allows these people to be tested and to self-isolate immediately.<\/p>\n","protected":false},"author":7,"featured_media":38986,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19,26],"tags":[206,1145,96,2727,1656],"class_list":["post-40226","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-headlines","category-opinions","tag-sophos","tag-tech-for-smbs","tag-technology","tag-technology-adaption","tag-technology-investment"],"_links":{"self":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/40226","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/comments?post=40226"}],"version-history":[{"count":0,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/40226\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media\/38986"}],"wp:attachment":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media?parent=40226"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/categories?post=40226"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/tags?post=40226"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}