Privacy in the Age of Coronavirus: A Conversation with Stephen Wicker
If we step away from the horror of the coronavirus—the overwhelming cases and new cases and deaths; the hospital scenes of corridors ringing with more attention-needing alarms than there are nurses and parking lots with refrigerated trucks; the EMTs forced to return to work even after testing positive; the warehouse workers and delivery drivers who don’t know if the next box they touch will be the one to give them the virus—if we step away from all of it, from enough distance, we can glimpse how the pandemic is holding up a mirror to the world, as each nation shows its essential character—its ability or inability to band together and head down the epic journey the virus is taking us on; its willingness to trade privacy for safety, its transparency at the level of government and the individual citizen, in a town or neighborhood, on the street, walking home from a shift as an essential worker, or just from the grocery store. South Korea has been one of the most aggressive countries when it comes to contact tracing. When someone tests positive for coronavirus, the local district uses cellphone data, taken by the government directly from the carrier networks, to send out emergency text alerts informing people that there is a new Covid-19 case in the area where they live. Names are withheld, but some districts publish the routes of confirmed patients, the public transport they took, and the medical institutions that are treating them. The U.S. has a history, at least a recent history, of protecting people’s privacy, even, and especially, in medical contexts. The 1996 Health Insurance Portability and Accountability Act, or HIPAA as it’s called, is a case in point. And yet, even that law explicitly permits “reporting of identifiable data for public health surveillance.” The U.S. coronavirus statistics are horrific; the South Korean ones enviable by comparison. And so perhaps it was inevitable that two of our biggest tech companies, Apple and Google, gatekeepers of our mobile operating systems, with a nudge and some research by one of our leading tech universities, MIT, have taken the first steps toward an app that uses the short-range network capabilities of our phones to do some of the same South Korea-style data-collection that can lead to contact tracing. To be sure, there will likely be some key differences, but it nevertheless raises some of the same questions of surveillance and loss of privacy. People with a Ph.D. level of understanding of networks and cellular systems who also research matters of privacy and security are rare and highly-prized individuals. Steven Wicker is a Professor of Electrical and Computer Engineering at Cornell University. His research focuses on the interface between networking technology, law, and sociology, with a particular emphasis on how design choices and regulations can increase or diminish our privacy and speech rights.