Sin dall'inizio ho apprezzato moltissimo il consulente di Bending Spoons, azienda autrice di Immuni, che ha correttamente evidenziato i limiti dell'attività dell'azienda.
Prima di tutto opera per conto del Ministero.
In secondo luogo si avvale delle risorse che Apple e Google hanno messo a disposizione.
Immuni è stata persino imitata in altre nazioni, come impostazione, perchè la più garantista.
Ciò non toglie, come ho segnalato, due criticità.
Immuni nasce per gestire, un domani, le cartelle cliniche. Tutti hanno evidenziato che le app anti covid NON devono avere anche altri trattamenti. Vedremo cosa succederà.
Nel frattempo l'altra criticità è stata sollevata dall'autorità olandese. Apple e Google devono spiegare le loro API.
L'ho sempre detto. La chiusura delle due società è rilevante, e non hanno spiegato alle autorità se non con dei protocolli, uniformati, che sono nati supportando espressamente anche la pubblicità.
Qualcosa di sottovalutato fino ad oggi.
Non siamo di fronte a piccole aziende. E lo shield aggiunge brividi a paure fondate.
Segue la traduzione automatica dall'olandese, notizia trovata dal bot di privacykit.it
AP: Privacy corona app users still not sufficiently guaranteed
The privacy around corona app CoronaMelder is not yet sufficiently guaranteed. The Dutch Data Protection Authority (AP) believes that the Minister should make agreements with Google and Apple about the software they provide for the use of the app, that there should be a law to properly regulate the use of the app and that it should be made clear that the servers that the app uses are also secure. The AP advises the cabinet to use the app only after the advice has been followed.
The AP is positive about the development of the app in itself, says AP President Aleid Wolfsen. 'It's clearly designed with privacy as a starting point. With all kinds of technical safeguards for the privacy of users, such as encryption of data traffic and sending fake codes to prevent you from reading anything from the data traffic.'
App doesn't stand alone
But the app doesn't stand alone. The app depends on other technical components and legislation. 'That's where our concerns are. That app is not only what you see on your screen, but also the technology of Google and Apple, and also the servers you send your data to. That app is part of a system. Even in those other parts of that system, privacy has to be in order, just as well as in the app itself.'
Appointments with Google and Apple needed
The AP's main concern is the so-called Google Apple Exposure Notification framework,the underlying software in mobile operating systems Android and iOS that makes the Dutch corona app possible. 'It's not clear to the AP whether these American tech giants are getting their hands on users' data through the combination of the framework and the operating system and what happens with it. And this is health data, very sensitive data of a lot of people,' says Wolfsen. 'So that's worrisome. The government must make clear agreements with Google and Apple before it uses the app. And the AP should be able to verify that this is properly arranged. That's not the case now.'
Legislation as a basis
Given the extensive and comprehensive impact of a Corona app, a law is the most logical basis. That law should provide for the Minister of Health and Human Rights to have the power to process this data and should also contain privacy safeguards.
Wolfsen: 'For example, it has to say that you can decide for yourself whether you want to use the app. This also means that you may not be refused in the hospitality industry, for example, if you do not have the app on your phone. And that your employer can't force you to use the app.'
'Back' must be safe
The final main point of the AP's advice is that the 'back' of the app should be well regulated: everything that happens on the servers. "It wasn't until tonight that it became clear who would manage it," wolfsen says. 'We don't yet know how that party handled security. It should be clear that that security is good. Only then can the app be used.'
The AP sent its opinion to the Ministry of Health and Human Development on 6 August 2020. It is up to the Minister to follow this advice.