EU data authorities issue joint opinion on Covid-19 passes

BELGIUM – Proposals for Covid-19 status certificates in the European Union must align with personal data protection legislation, EU data protection authorities have said.

Covid-19 vaccine

The European Commission’s proposed ‘digital green certificate’ would allow people who have had a Covid-19 vaccine, or have recently tested negative for the virus, to travel within the EU.

In a statement, the European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) said: “The data protection commissioners from all EU and European Economic Area countries highlight the need to mitigate the risks to fundamental rights of EU citizens and residents that may result from issuing the digital green certificate, including its possible unintended secondary uses.

“The use of the digital green certificate may not, in any way, result in direct or indirect discrimination of individuals, and must be fully in line with the fundamental principles of necessity, proportionality and effectiveness.”

A joint opinion issued by the EDPB and EDPS states that a distinction should be made between a vaccination certificate and the term ‘immunity certificate’, pointing to a lack of scientific evidence to support the fact being vaccinated or having recovered from the virus grants immunity.

The two authorities recommended that a ‘comprehensive’ legal framework and appropriate legal basis in the member states should accompany the launch of the certification.

Andrea Jelinek, chair of the EDPB, said: “Any measure adopted at national or EU level that involves processing of personal data must respect the general principles of effectiveness, necessity and proportionality.”

Wojciech Wiewiórowski, EDPS, said: “It must be made clear that the proposal does not allow for – and must not lead to – the creation of any sort of central database of personal data at EU level. In addition, it must be ensured that personal data is not processed any longer than what is strictly necessary and that access to and use of this data is not permitted once the pandemic has ended.”

In the UK, the government is planning to trial Covid-19 status certificates, colloquially known as ‘vaccine passports’, at large sporting and leisure events. The trials will first involve Covid-19 testing and will later introduce vaccine certification.

The proposal has been criticised by a number of politicians including Conservative back-benchers.

Information commissioner Elizabeth Denham said: “The success of any Covid-status schemes will rely on people trusting them and having confidence in how their personal data will be used. It is crucial that, from the start, thought is given to how data can be used fairly and how this can be explained clearly to people using a scheme.”

Any organisation processing personal data as part of a certification scheme would be responsible for complying with data protection law.

Denham added: “My office has been briefed regarding the government’s ongoing work regarding Covid-status certification, and I welcome commitments we have received to continue open engagement that will enable us to advise on protecting people’s personal data during development of a scheme.”

We hope you enjoyed this article.
Research Live is published by MRS.

The Market Research Society (MRS) exists to promote and protect the research sector, showcasing how research delivers impact for businesses and government.

Members of MRS enjoy many benefits including tailoured policy guidance, discounts on training and conferences, and access to member-only content.

For example, there's an archive of winning case studies from over a decade of MRS Awards.

Find out more about the benefits of joining MRS here.

0 Comments


Display name

Email

Join the discussion

Newsletter
Stay connected with the latest insights and trends...
Sign Up
Latest From MRS

Our latest training courses

Our new 2025 training programme is now launched as part of the development offered within the MRS Global Insight Academy

See all training

Specialist conferences

Our one-day conferences cover topics including CX and UX, Semiotics, B2B, Finance, AI and Leaders' Forums.

See all conferences

MRS reports on AI

MRS has published a three-part series on how generative AI is impacting the research sector, including synthetic respondents and challenges to adoption.

See the reports

Progress faster...
with MRS 
membership

Mentoring

CPD/recognition

Webinars

Codeline

Discounts