[LINK] Interoperability guidelines for EU contact tracing applications

[Stephen Loosley]

Interoperability guidelines for approved contact tracing mobile applications in the EU

https://ec.europa.eu/health/sites/health/files/ehealth/docs/contacttracing_mobileapps_guidelines_en.pdf

I. INTRODUCTION

This document addresses the first follow-up action envisaged by the eHealth Network’s “Common EU Toolbox for Member States Version 1.0,” namely, ‘developing further the interoperability framework’ for mobile contact tracing apps.

Most Member States have launched or intend to launch an approved mobile contact tracing app designed to fulfil operational objectives that are specific to their national COVID-19 crisis management strategy.

For example, some apps require almost all data processing and storage to take place on the device. Other apps would require more processing and storage on a backend server.

Both approaches require implementation in such a way to prevent the possibility for identification of app users, whether infected, exposed or otherwise, unless that information has been voluntarily provided by the individuals in question.

Users should be able to rely on a single app independently of the region or Member State they are in at a certain moment.

Whatever the approach taken with approved apps, all Member States and the Commission consider that interoperability between these apps and between backend systems is essential for these tools to enable the tracing of cross-border infection chains.

This is particularly important for cross-border workers and neighbouring countries.

Ultimately, this effort will support the gradual lifting of border controls within the EU and the restoration of freedom of movement.

These tools should be integrated with other tools contemplated in the COVID-19 contact tracing strategy of each Member State.

For the purposes of this document, interoperability refers to these apps being able to exchange the minimum information necessary so that individual app users, wherever they are located in the EU, are alerted if they have been in proximity, within a relevant period, with another user who has notified the app that he/she has tested positive for COVID-19.

This alert and follow up should be in accordance with the procedures defined by public health authorities with potential privacy and security implications assessed and appropriate safeguards applied
.
This document therefore proposes guidelines for cross-border interoperability of approved contact tracing mobile apps and associated procedures.

The interoperability guidelines are a living document and will be used as baseline for interoperability specifications to guide developers when designing and implement the apps and backend solutions ...