For Immediate Release: 30/06/2020
Indonesia Government Must Protect People’s Privacy during Its COVID-19 Contact Tracing Efforts
Bangkok/Jakarta – In an open letter to the Ministry of Communication and Information Technology (KOMINFO), the Representative of Indonesia to the ASEAN Intergovernmental Commission on Human Rights (AICHR) and 13 organizations have called for the Government of Indonesia to be more transparent about their contact tracing efforts during the time of COVID-19.
The parties request the Indonesian governments to do the following:
- Release the white paper and the source code of PeduliLindungi under an open source license. The white paper should contain all necessary details of the system’s architecture, functions, protocols, data management and security design. The source code should be that of the deployed system, complete, up-to-date, and buildable so that the system’s security and privacy treatment can be independently verified. The white paper and the source code must be regularly updated along with the app.
- Issue data privacy regulations that specifically address PeduliLindungi. The regulation must stipulate that the collected data will not be used for purposes other than contact tracing, as well as ensuring there are prevention methods (e.g. third-party audit where the result is publicly available) in place to keep the data secure from cyberattacks and data breach incidents.
- Be transparent about the data breach incident that occurred from the PeduliLindungi’s database, including extent of the data breach, type (s) and volume of personal data involved, cause or suspected cause of the data breach, whether the data breach has been rectified, and measures and processes that KOMINFO had in place at the time of the data breach. The ministry should conduct a formal investigation and report on the incident and take steps to harden the system to prevent a reoccurrence.
- In keeping with its international commitments to protect the fundamental human right to privacy, KOMINFO and the Indonesian Government must protect the right to privacy of citizens in any upcoming contact tracing efforts. Transparency must be provided to the furthest extent possible in relation to how privacy is treated.
The open letter is signed by the following parties;
Yuyun Wahyuningrum, Representative of Indonesia to the ASEAN Intergovernmental Commission on Human Rights (AICHR)
Southeast Asia Freedom of Expression Network (SAFEnet)
Institute for Policy Research and Advocacy (ELSAM)
Commission for the Disappeared and Victims of Violence (KontraS)
Protection Desk Indonesia/Yayasan Perlindungan Insani Indonesia (YPII)
Indonesia Legal Aid Foundation (YLBHI)
Human Rights Working Group (HRWG)
CIVICUS: World Alliance for Citizen Participation
Combine Resource Institution (CRI)
Asia Democracy Network (ADN)
For the full open letter, it can be found here in this link.
For media enquiries, please contact:
Fingerprint: 0D02 CC2A 5DCA 6EC8 731F 9D0B 8C9E 4DD3 E971 4074