Same People going after Trump!
Democrat bill, H.R. 6666
Over the past several weeks, Senate Republicans and Democrats have introduced competing bills to regulate how companies can collect and use diagnostic and geolocation data to conduct contact tracing and other forms of disease surveillance. The proposals have important differences: The Republican bill would apply only to companies, while the Democratic bill would also apply to non-public-health government agencies; and the Democratic bill also imposes data-security requirements and a host of civil rights safeguards. But at their core they propose similar restrictions on data collection and use, suggesting an emerging bipartisan consensus. Much of this consensus is valuable, and the provisions encouraging effectiveness and transparency, as well as the prohibition on using coronavirus data for anything other than public health purposes (for example, no advertising), should be adopted. But a key part—the focus on individual consent to collection—is a mistake.
Both bills require organizations to get affirmative consent from users before collecting coronavirus-related data. The bills also stipulate that consent cannot be inferred from inaction; users must expressly agree to have their data collected. Both bills also provide users with the right to revoke consent and opt out of collection. The Democratic bill’s sponsors justify the consent provisions on the grounds that people won’t trust health companies with their data unless they know it’s being protected. Maybe. But it’s just as possible that requiring people to opt in will discourage them from participating in the first place. In countries such as Singapore and Australia, where participation in tracking apps is voluntary, participation levels have remained low, thus rendering the programs ineffective (because the effectiveness of a contact-tracing app is the square of the fraction of the population that uses it). There’s no reason to think that voluntary programs will fare any better in the United States.