[CardinalSagehen]

I think we need to execute competently on basic, voluntary forms of tracing, including most notably a nationwide, opt-in contact tracing app with a robust PR campaign behind it. We should do this before moving to involuntary tracing, which I’d also support if the situation were grave enough and we had executed competently on everything else first. Right now, it’s hard to say what’s necessary because we have sucked so badly at the basics.  

Go to Setings / Privacy / Health / Covid-19 Exposure Notifications on your iPhone or the equivalent on your Android phone. You will see that Apple and Google have done some of their part by making contact tracing APIs available already.  The feature is totally opt-in, and data storage is decentralized and anonymized. Both companies have vowed never to use the data for commercial purposes and to kill the APIs after Covid-19 has passed. Only public health officials are supposed to be able to see the data, and I’m not quite clear on this, but I believe it might be anonymous data for them, too. 

Importantly, the tracing feature uses local Bluetooth signals, not GPS, to record proximity to others that turn out to be infected.   

An app doesn’t have to be used correctly and honestly by everyone to make a difference.  I think even 10-15% penetration of the American populace (with a natural uptick in the hardest-hit areas) would start to matter.  

Contact notification is immediate. Notified contacts would presumably get tested quickly and prevent further spreading.    

Our software industry is unparalleled and second to none, but apparently we can’t release a simple Bluetooth app because we have 50 states running in different directions and no federal Internet privacy laws to govern this sort of thing.

As a result, for now, the contact tracing features on all of our smartphones remain dormant and useless. I’d love to see what we can do with a real effort around these apps and a federal privacy framework to govern them.

There’s a bipartisan bill in Congress right now called the Exposure Notification Privacy Act.  I haven’t read it, but at a high level, I believe something like this is necessary to help us navigate the obvious privacy issues and move toward better, faster, safer use of technology for contact tracing.

IIRC, only four states have approved this (just Alabama, South Carolina, North Dakota and Virginia), and quite a number of very prominent states have expressly rejected it, including AZ, CA, CO, DE, ME, MD, MI, MO, OH, PA, SD, TN, TX, WA, WV, WI, WY.

https://9to5mac.com/2020/06/05/covid-19-...pi-states/

Thanks for the link. That’s really too bad.  It’s exactly my point and one reason why I’m so frustrated.  

First, it’s asinine that we can move freely amongst states, but states get to make these decisions autonomously.  Of course, the situation is different in different places, but when it comes to certain solutions like contact tracing, scale matters.  

Second, the public disagrees - 60% of Americans trust Big Tech to oversee contact tracing, even though most Americans realize their privacy could be compromised (recent NextGov poll). 

Third, what have these states delivered as an alternative in terms of contact tracing, and how well is it working?  In general, it seems like they’re game for manual contact tracing, which is fine as part of the solution but inherently narrow and slow.  And by the way, manual contact tracing invades privacy quite a bit more than the Apple and Google solution, which is anonymous.

I believe federal legislation remains important precisely for this reason - to hold states and counties to certain privacy standards while paving the way for pragmatic, nationwide solutions as well.

[CardinalSagehen]

I think we need to execute competently on basic, voluntary forms of tracing, including most notably a nationwide, opt-in contact tracing app with a robust PR campaign behind it. We should do this before moving to involuntary tracing, which I’d also support if the situation were grave enough and we had executed competently on everything else first. Right now, it’s hard to say what’s necessary because we have sucked so badly at the basics.  

Go to Setings / Privacy / Health / Covid-19 Exposure Notifications on your iPhone or the equivalent on your Android phone. You will see that Apple and Google have done some of their part by making contact tracing APIs available already.  The feature is totally opt-in, and data storage is decentralized and anonymized. Both companies have vowed never to use the data for commercial purposes and to kill the APIs after Covid-19 has passed. Only public health officials are supposed to be able to see the data, and I’m not quite clear on this, but I believe it might be anonymous data for them, too. 

Importantly, the tracing feature uses local Bluetooth signals, not GPS, to record proximity to others that turn out to be infected.   

An app doesn’t have to be used correctly and honestly by everyone to make a difference.  I think even 10-15% penetration of the American populace (with a natural uptick in the hardest-hit areas) would start to matter.  

Contact notification is immediate. Notified contacts would presumably get tested quickly and prevent further spreading.    

Our software industry is unparalleled and second to none, but apparently we can’t release a simple Bluetooth app because we have 50 states running in different directions and no federal Internet privacy laws to govern this sort of thing.

As a result, for now, the contact tracing features on all of our smartphones remain dormant and useless. I’d love to see what we can do with a real effort around these apps and a federal privacy framework to govern them.

There’s a bipartisan bill in Congress right now called the Exposure Notification Privacy Act.  I haven’t read it, but at a high level, I believe something like this is necessary to help us navigate the obvious privacy issues and move toward better, faster, safer use of technology for contact tracing.

IIRC, only four states have approved this (just Alabama, South Carolina, North Dakota and Virginia), and quite a number of very prominent states have expressly rejected it, including AZ, CA, CO, DE, ME, MD, MI, MO, OH, PA, SD, TN, TX, WA, WV, WI, WY.

https://9to5mac.com/2020/06/05/covid-19-...pi-states/

Thanks for the link. That’s really too bad.  It’s exactly my point and one reason why I’m so frustrated.  

First, it’s asinine that we can move freely amongst states, but states get to make these decisions autonomously.  Of course, the situation is different in different places, but when it comes to certain solutions like contact tracing, scale matters.  

Second, the public disagrees - 60% of Americans trust Big Tech to oversee contact tracing, even though most Americans realize their privacy could be compromised (recent NextGov poll). 

Third, what have these states delivered as an alternative in terms of contact tracing, and how well is it working?  In general, it seems like they’re game for manual contact tracing, which is fine as part of the solution but inherently narrow and slow.  And by the way, manual contact tracing invades privacy quite a bit more than the Apple and Google solution, which is anonymous.

I believe federal legislation remains important precisely for this reason - to hold states and counties to certain privacy standards while paving the way for pragmatic, nationwide solutions as well.