Security, Privacy and Data Sovereigntystrategy
TASK
Scenario
The sudden increase in COVID-19 cases worldwide has caused considerable disruption in many
countries. However, a number of countries have started to use an individual tracking approach to try and
contain the spread of the virus.
A number of countries have developed mobile phone apps that track people and their movements.
Some details of these apps are:
• Singapore: Contact tracing app. See: https://www.thestar.com.my/tech/tech-
news/2020/03/20/covid-19-singaporelaunches-contact-tracing-mobile-app-to-track-
coronavirus-infections https://www.businessinsider.com.au/singapore-coronavirus-app-
trackingtesting-no-shutdown-how-it-works-2020-3?r=US&IR=T
(https://www.businessinsider.com.au/singapore-coronavirus-app-trackingtesting-no-
shutdown-how-it-works-2020-3?r=US&IR=T)
• South Korea: Tracking mobile phones and cashless transactions:
https://www.channelnewsasia.com/news/commentary/covid-19-coronavirussouth-korea-
cases-test-data-surveillance-12559252
• Taiwan: Quarantine by mobile: https://www.theguardian.com/world/2020/mar/13/how-
taiwan-is-containingcoronavirus-despite-diplomatic-isolation-by-china
• Australia: CovidSafe: https://www.health.gov.au/resources/apps-and-tools/covidsafe-app/
covidsafe-help
https://www.qte.am/articles/covidsafe-follow-up
https://theconversation.com/privacy-vs-pandemic-government-tracking-ofmobile-
phones-could-be-a-potent-weapon-against-covid-19-134895
Since the release of CovidSafe, Google and Apple have announced a joint initiative to do contact tracing.
See https://www.apple.com/au/newsroom/2020/04/apple-and-googlepartner-on-covid-19-contact-
tracing-technology/and https://www.xda-developers.com/ google-apple-contact-tracing-coronavirus/
There is also an article from ScienceMag.org that discusses phone tracking in more detail at
https://www.sciencemag.org/news/2020/03/cellphone-tracking-could-help-stem-spreadcoronavirus-
privacy-price# (https://www.sciencemag.org/news/2020/03/cellphone-trackingcould-help-stem-spread-
coronavirus-privacy-price).
Tasks
After your successful engagement to develop privacy and personal data protection strategies for DAS,
you have been engaged by the Department of Health (DoH) to advise on the development of privacy and
data protection for CovidSafe users. DoH expect up to 16 million Australian mobile users to download
and use this app. DoH have announced that they will be using a major U.S. based public cloud provider
to host the CovidSafe data, but claim that the data will always be under Australian Government control.
You are to provide a report to DoH that:
Charles Sturt University Subject Outline
ITC568 202060 SM I Page 2 of 8
Version 1 – Published 29 June 2020
- Discusses the possible threats and risks to the security of user data on mobile phones, and in
linked Cloud and financial accounts from the use of the CovidSafe app. (25 marks) - Discusses the possible threats to the privacy of a user’s data, location and activities from the
use of the CovidSafe app. (25 marks) - Discusses the issues of data sovereignty that may apply to the storage of CovidSafe data in U.S.
based Cloud storage. (25 marks) - You are to recommend that DoH adopt:
a. Possible security controls that would prevent the loss or breach of user data, while still
enabling effective tracking for COVID-19, and the reasons these controls will be
effective. (10 marks)
b. Possible privacy controls to protect user privacy, particularly of data, location and
activity, while still enabling effective tracking of COVID-19, and the reasons these
controls will be effective. (5 marks)
c. Possible controls to ensure that the CovidSafe data remains under Australian data
sovereignty and control, and the reasons these controls will be effective.
(5 marks)
Presentation
Your report should use the following heading structure:
• Data and security risks
• Privacy, location and activity issues
• Data sovereignty issues • Recommendations:
Security controls
Privacy controls
Data sovereignty controls Your
report should be about 3,000 to 4,000 words.
