The information in this project is based on secondary resources, which includes news articles and academic research. The analytical approach in this project is based on the right to privacy as a universal human rights principle described in Article 12 of the Universal Declaration of Human Rights (UDHR). This analysis looks at both technical and policy aspects. Information on the technical part of the right to privacy is gathered from secondary sources, such as academic papers, reviews, and analyses from various independent technical sources. This analysis also includes findings from the examination of the released source code of the app and hardware parts, and the results from reverse engineering. All secondary sources are cited. DigitalReach also examined the released source code of a number of apps including Singapore’s TraceTogether and Thailand’s Mor Chana. The content related to policy is analyzed based on the international best practices as well as the World Health Organization (WHO)’s Ethical Considerations to Guide the Use of Digital Proximity Tracking Technologies for COVID-19 contact tracing.
Digital contact tracing apps, platforms, and devices can be a moving target, while the software updates may not be sufficiently transparent. Therefore, it is also challenging to gather information about the updates and their treatment of personal data and the privacy of users. In order to access this information for a more thorough analysis of the app, an analysis would need to use reverse engineering. However, reverse engineering requires a substantial amount of resources, including a team of highly-skilled people to conduct reverse engineering and who can monitor the development of digital contact tracing apps, platforms, and devices on a full-time basis. Reverse engineering is also time-consuming and can be complicated, and as such, may require an interpretation of technical analysis into plain English for a general audience. Information from reverse engineering can therefore be challenging to conduct for the purpose of analysis.