European data protection authorities and other national resources on Covid-19

Austrian Data Protection Authority, 'Information der Datenschutzbehörde zum Coronavirus (Covid-19)' (16 March 2020): click here.

Belgian Data Protection Authority (APD):

• 'Recommendation n° 02/2020 du 31 janvier 2020: La portée de l'obligation de conclure un protocole afin de formaliser les communications de données à caractère personnel en provenance du secteur public fédéral' (updated on 25 March 2020): click here (FR), click here (NL).

• 'COVID-19 et traitement de données à caractère personnel sur le lieu de travail' (13 March 2020): click here (FR), click here (NL).

• 'Collecte des données de contact dans l’horeca dans le cadre de la lutte contre le COVID-19' (August 2020): click here (FR), click here (NL).

• L’APD se penche sur une potentielle faille de sécurité de l’application CovidScan (November 2021): click here (FR).

Personal Data Protection Agency in Bosnia and Herzegovina:

• 'Saopštenje za javnost vezano za obradu ličnih podataka u kontekstu aktivnosti izazvane pandemijom korona virusa' (24 March 2020): click here (text document) - available in Bosanski, Hrvatski and Srpski.
• 'Zabrana objavljivanja ličnih podataka o licima koja su pozitivna na korona virus kao i licima kojima su određene mjere izolacije i samoizolacije' (25 March 2020): click here (text document) - available in Bosanski, Hrvatski and Srpski.

Office of the Commissioner for Personal Data Protection, 'Announcement of the Commissioner for Personal Data Protection concerning the measures taken for the pandemic management' (Ανακοίνωση Επιτρόπου Προστασίας Δεδομένων Προσωπικού Χαρακτήρα σχετικά με τα μέτρα που λαμβάνονται για την διαχείριση της πανδημίας) (27 March 2020): click here.

Czech Data Protection Authority:

• 'ÚOOÚ ke zpracování osobních údajů v souvislosti s šířením koronaviru' (13 March 2020): click here.
• 'Ke zpracování osobních údajů v rámci opatření proti šíření koronaviru' (19 March 2020): click here.
• 'Moderními technologiemi kontrolují karanténu hlavně asijské země' (27 March 2020): click here.
• 'Tisková zpráva: Úřad se vyjádřil k mimořádnému opatření ministerstva zdravotnictví v souvislosti s projektem chytrá karanténa' (2 April 2020): click here.

French Data Protection Authority (CNIL):

• 'Coronavirus (Covid-19) : les rappels de la CNIL sur la collecte de données personnelles' (6 March 2020): click here.
• 'Recherches sur le COVID-19 : la CNIL se mobilise' (26 March 2020): click here.

• Délibération n° 2020-046 du 24 avril 2020 portant avis sur un projet d’application mobile dénommée « StopCovid » (24 April 2020): click here (pdf).

• LINC, 'Passeport d’immunité : un totem à risques' (5 May 2020): click here.

• CNIL, Délibération n° 2020-056 du 25 mai 2020 portant avis sur un projet de décret relatif à l’application mobile dénommée «StopCovid» (25 May 2020): click here.

• CNIL, Décision n° MED-2020-015 du 15 juillet 2020 mettant en demeure le ministère des solidarités et de la santé: click for (FR) and (EN).

Federal Commissioner for Data Protection and Freedom of Information (BfDI):

• 'DSK gibt Hinweise zu Datenschutz und Corona' (13 March 2020): click here.
• 'Datenschutzrechtliche Informationen zur Corona-Krise': click here.

LexCorona (wiki), 'Dokumente der Datenschutz-Aufsichtsbehörden': click here.

Berliner Beauftragte für Datenschutz und Informationsfreiheit, 'Hinweise für Berliner Verantwortliche zu Anbietern von Videokonferenz-Diensten' (3 July 2020): click here.

Gibraltar Regulatory Authority:

• Information Commissioner, 'Data protection and coronavirus: what you need to know' (13 March 2020): click here.
• Information Rights Division, 'Data Protection and Covid-19' (6 April 2020): click here.
• 'GDPR & DPA (19) COVID-19: CONTACT TRACING & LOCATION DATA' (29 April 2020): click here.

Hungarian Data Protection Authority, 'Information on processing data related to the coronavirus epidemic' (March 2020): click here.

Icelandic Data Protection Authority:

• 'COVID-19 og persónuvernd' (13 March 2020): click here.
• 'Umsókn um heimild til vísindarannsóknar á COVID-19' (21 March 2020): click here.
• 'Afgreiðsla á máli vegna vísindarannsóknar á COVID-19' (24 March 2020): click here.

Irish Data Protection Commission:

• 'Data Protection and COVID-19' (6 March 2020): click here.
• 'Protecting Personal Data When Working Remotely' (12 March 2020): click here.
• 'Covid 19 and Subject Access Requests' (25 March 2020): click here.
• 'Staying safe online during a pandemic' (26 March 2020): click here.
• 'COVID-19: DPC Remote Working Arrangements' (2 April 2020): click here.

Italian Data Protection Authority (Garante):

• 'Coronavirus: Garante Privacy, no a iniziative "fai da te" nella raccolta dei dati Soggetti pubblici e privati devono attenersi alle indicazioni del Ministero della salute e delle istituzioni competenti' (2 March 2020): click here.
• 'In uno stato di eccezione è lecito rinunciare a qualche libertà. Ma il nostro modello non potrà mai essere la Cina" - Intervista ad Antonello Soro' (19 March 2020) click here.
• 'Provvedimento del 26 marzo 2020 - "Didattica a distanza: prime indicazioni" ' (26 March 2020): click here.
• 'Coronavirus: Garante privacy, su social e media troppi dettagli sui malati' (31 March 2020): click here.
• 'Parere sulla proposta normativa per la previsione di una applicazione volta al tracciamento dei contagi da COVID-19' (29 April 2020): click here.
• 'Coronavirus: le FAQ del Garante privacy su scuola, lavoro, sanità, ricerca ed enti locali. Chiarimenti e indicazioni per pubbliche amministrazioni e imprese private' (6 May 2020): click here.

Latvian Data State Inspectorate:

• 'DVI vērš uzmanību uz personu tiesībām un pienākumiem datu aizsardzības jomā veselības informācijas kontekstā' (17 March 2020): click here.
• 'Par sensitīvo datu publiskošanu' (20 March 2020): click here.

Dutch Data Protection Authority (AP):

• 'AP geeft organisaties meer tijd vanwege coronacrisis' (20 March 2020): click here.
• 'Mijn zieke werknemer' (March 2020): click here.
• 'Gebruik telecomdata tegen corona kan alléén met wet' (1 April 2020): click here.
• All updates on Corona: click here.

Polish Data Protection Authority (UODO):

• 'Oświadczenie Prezesa UODO w sprawie koronawirusa (12 March 2020)/ Statement by the President of the Personal Data Protection Office on coronavirus (17 March 2020)' : click here for (PL) and (EN).
• 'Dane osobowe bezpieczne podczas zdalnego nauczania – poradnik UODO dla szkół / Security of personal data during remote learning – UODO’s guide for schools' (31 March 2020): click here for (PL) and (EN).

Proteção de dados no contexto do COVID-19: click here.

Slovakian Data Protection Authority:

• 'Koronavírus a spracúvanie osobných údajov' (13 March 2020): click here.
• 'Stanovisko úradu k požadovaniu údajov o osobách nakazených Covid-19 alebo o osobách v karanténe mestami a obcami' (26 March 2020): click here.

Slovenian Information Commissioner:

• 'Odgovorno ravnanje vseh je ključno v času virusne krize' (12 March 2020): click here.
• 'Varstvo osebnih podatkov v času epidemije koronavirusa (COVID-19)' (20 March 2020): click here.
• 'Obveščanje državljanov o začasni prepovedi javnega zbiranja preko SMS sporočil' (23 March 2020): click here.
• 'Sporočilo za javnost glede obdelave osebnih podatkov preko neodvisne spletne strani za zbiranje in prikazovanje podatkov o okužbi Covid-19 v Sloveniji https://covid-19-stats.si/ (COVID-19 SAMOPOROČANJE)' (26 March 2020): click here.
• 'Predlog Zakona o interventnih ukrepih za zajezitev epidemije COVID-19 in omilitev njenih posledic za državljane in gospodarstvo –EVA 2020-1611-0028–MNENJE' (30 March 2020): click here.
• 'Advisory opinion on the establishment of a temporary information system for the combat against the SARS-CoV-2 pandemic to the government of the Republic of Slovenia and the Jozef Stefan Institute', noyb/GDPRHub (30 March 2020): click here.
• 'Iskalnik po mnenjih GDPR' (28 July 2020): click for (SL) and (EN).

Spanish Data Protection Authority (AEPD):

• 'La AEPD publica un informe sobre los tratamientos de datos en relación con el COVID-19' (12 March 2020): click here; English version here (pdf).
• 'Campañas de phishing sobre el COVID-19' (12 March 2020): click here.
• 'Comunicado de la AEPD en relación con webs y apps que ofrecen autoevaluaciones y consejos sobre el Coronavirus' (16 March 2020): click here;'Comunicado de la AEPD sobre apps y webs de autoevaluación del Coronavirus' (26 March 2020): click here.
• 'FAQs sobre el coronavirus': click here.

Catalan Data Protection Authority, 'Nota en relació amb els tractaments de dades personals relacionats amb les mesures per fer front al COVID-19' (15 March 2020): click here.

Swiss Federal Data Protection and Information Commissioner:

• 'Legal data protection framework for coronavirus containment': click here for [FR] (12 March 2020), [DE] (10 March 2020) and [EN] (17 March 2020).
• 'Update "Covid proximity tracing App": FDPIC examines system architecture and demands proof of sufficient legal basis' (23 April 2020): click here (EN).

Information Commissioner's Office (ICO):

• 'Data protection and coronavirus - Statement for Health and Care Practicioners' (12 March 2020): click here.
• 'Data protection and coronavirus: what you need to know - For organisations' (16 March 2020): click here.
• 'Coronavirus and personal data', Your data matters blog, (18 March 2020): click here.
• 'Community groups and COVID-19: what you need to know about data protection' (26 March 2020): click here.
• 'Statement in response to the use of mobile phone tracking data to help during the coronavirus crisis' (28 March 2020): click here.

• 'Apple and Google joint initiative on COVID-19 contact tracing technology' (17 April 2020): click here.

• 'Contact tracing - protecting customer and visitor details' (July 2020): click here.

• EPICCENTER.WORKS, 'Eine Analyse der COVID-19 Gesetze' (16 March 2020): click here.
• VOL.AT, 'Coronavirus - Telekom-Daten deuten auf Wirksamkeit der Maßnahmen', Vorarlberg Online (17 March 2020): click here.
• Al-Youssef, Muzayen, Laurin Lorenz, Fabian Schmid, 'Was passiert mit unseren Grundrechten in Zeiten von Corona?', Der Standard (17 March 2020): click here.
• ORF.AT, 'Nutzung von Handydaten als Gratwanderung' (31 March 2020): click here.

• Wolters Kluwer, 'Overzicht van alle wettelijke maatregelen tegen Covid-19' (since March 2020): click here.
• Vanhecke, Nikolas and Roeland Termote, 'Telecomdata worden ingeschakeld tegen coronavirus', De Standaard (20 March 2020): click here.
• EU Agency for Fundamental Rights (FRA), 'Coronavirus COVID-19 outbreak in the EU Fundamental Rights Implications (Country report: Belgium)' (23 March 2020): click here.
• Fiten, Bernd and Somers, Geert, 'COVID-19: Can health data be processed? + FAQ', Timelex (23 March 2020): click here.
• Spinks, Jason, 'Belgian app aids socially distant shopping', The Brussels Times (30 March 2020): click here.
• Spinks, Jason, 'Belgians develop anonymous contact tracing system', The Brussels Times (28 April 2020): click here.

• Le Soir, 'Bruxelles: le traçage débute sa phase test le 4 mai, démarrage complet le 11 mai' (29 April 2020): click here.

• Van Durme, Camille, 'Call Centers or Contact Tracing Apps: Belgium's Unenviable Choice', Belgian League of Human Rights - Civil Liberties for Europe (14 May 2020): click here.

• Van Quathem, Kristof and Cooper, Dan, 'French Supervisory Authority issues COVID-19 Guidance', Inside Privacy (8 March 2020): click here.
• Cybermalveillance.gouv.fr, 'CORONAVIRUS – COVID-19: Appel au renforcement des mesures de vigilance cybersécurité' (16 March 2020): click here.
• La Quadrature du Net, 'Contre le COVID-19, la géolocalisation déjà autorisée' (19 March 2020): click here.
• Hunton Andrews Kurth, 'CNIL Recalls Data Protection Rules in the Context of the COVID-19 Outbreak', Privacy and Information Security Law Blog (20 March 2020): click here.
• Schuck, Nathalie, 'Coronavirus : pour vaincre l’épidémie, faut-il traquer les Français ?', Le Parisien (24 March 2020): click here.
• Ministère de l'intérieur, 'Attestation de déplacement dérogatoire et justificatif de déplacement professionnel' (25 March 2020): click here.
• Griguer, Merav and Franco, Sharone, 'COVID-19: Coronavirus pandemic and cybersecurity, when cyber criminals exploit the health crisis in France', Bird&Bird (March 2020): click here.
• La Quadrature du Net, 'Covid-19 : l’attaque des drones' (1 April 2020): click here.
• Conseil d'État, 'Decision: Surveillance par drones' (18 May 2020): click here.

• Schrey, Joachim, 'Data protection and coronavirus prevention - Measuring temperature upon entry to the workplace', Noerr, (10 March 2020): click here.
• Elteste, Ulrike, 'German Authorities Issue Guidance Related to Coronavirus', Inside Privacy (17 March 2020): click here.
• CILIP, 'Corona Epidemie: Tagebuch der inneren Sicherheit' (18 March 2020): click here.
• Deutschlandfunk, 'Datenschützer hält Weitergabe von Handydaten in Coronavirus-Zeiten für vertretbar', Deutschlandfunk (18 March 2020): click here.
• EAID, 'Appeal of the European Academy for Freedom of Information and Data Protection: Corona – Fight the pandemic, protect civil rights and data protection!' (26 March 2020): click here.
• Grüll, Philipp, 'Privacy activists on COVID-19 surveillance: Either ineffective or questionable', EURACTIV Germany (26 March 2020): click here.
• Stieber, Benno, 'Datenschutzbeauftragter empört: „Da werden Dämme eingerissen“', taz (27 March 2020): click here.
• Laufer, Daniel, 'Coronavirus-Listen der niedersächsischen Polizei sind illegal', Netzpolitik (3 April 2020): click here.
• Thoms, Katharina, 'Sichere Datenbank mit Corona-Infizierten für Polizei in BW', SWR (3 April 2020): click here.
• DPA, 'Polizei darf in Einzelfällen auf Corona-Daten zugreifen', Sueddeutsche Zeitung (4 May 2020): click here.
• Hottelet, Ulrich, 'Datenschutz in der Corona-Krise', Heise Online (4 May 2020): click here.
• Piltz, Carlo, 'German Labour Court: Use of cameras for distance monitoring in the context of the Corona pandemic is subject to co-determination of the works council', LinkedIn (7 May 2020): click here
• VGH Baden-Württemberg, 'Beschluß vom 25.6.2020, 1 S 1739/20 - Die Maskenpflicht und die Pflicht zur Abgabe von Kontaktdaten in Gaststätten während der Corona-Pandemie sind bei summarischer Prüfung offensichtlich rechtmäßig': click for (DE) and (EN).
• VGH München, Beschluss v. 19.08.2020 , 7 CE 20.1822 - Auskunftsbegehren auf die kumulierte Gesamtzahl der COVID-19-Infektionen in einem Landkreis: click for (DE) and (EN).

• Hellenic Authority for Communication Security and Privacy (ADAE), 'Press Statement for the Number 13033 (ΔΕΛΤΙΟ ΤΥΠΟΥ για τον αριθμό 13033)' (27 April 2020): click here.
• General Secretariat for Civil Protection, 'Lockdown Movement Permit': click here for information on the Lockdown Movement Permit (in English/Greek) and here for the Privacy Policy and Data Protection (in Greek) for the Number 13033.
• Lawspot, 'Personal data and coronavirus: Are the hospitals allowed to use cameras in wards and broader spaces?' (Προσωπικά δεδομένα και κορωνοϊός: Μπορούν τα νοσοκομεία να χρησιμοποιούν κάμερες σε θαλάμους και ευρύτερους χώρους;) (13 March 2020): click here.
• Mitrou, Lilian, 'Personal data in the coronavirus era' (Τα προσωπικά δεδομένα στην εποχή του Κορωνοϊού), SyntagmaWatch (16 March 2020): click here.
• Panagopoulou-Koutnatzi, Fereniki:
  • 'The protection of personal data in the times of Coronavirus' (Η προστασία των προσωπικών δεδομένων στην εποχή του κορωνοϊού), SyntagmaWatch (17 March 2020): click here.
  • 'The personal data protection during a pandemic' (Η προστασία προσωπικών δεδομένων σε περίοδο πανδημίας), constitutionalism.gr (March 2020): click here.

• Vamvaka, Elpida and Zacharopoulou, Marina, 'Personal data protection during the corovavirus pandemic' (H προστασία των προσωπικών δεδομένων στην πανδημία του κορωνοϊού), Homo Digitalis (19 March 2020): click here.
• Cooper, Dan and Goulielmos, Spyridon, 'Greek Data Protection Authority Issues Guidelines on Data Protection and Coronavirus', Inside Privacy (30 March 2020): click here.
• Platis-Anastassiadis and Associates, 'GREECE COVID-19: How should Greek companies respond in compliance with the GDPR?', Law Alert (March 2020): click here.
• Homo Digitalis, 'COVID-19 and Digital Rights in Greece (COVID-19 & ΨΗΦΙΑΚΑ ΔΙΚΑΙΩΜΑΤΑ ΣΤΗΝ ΕΛΛΑΔΑ)' (22 April 2020): click here (pdf).
• Homo Digitalis, 'Questions to the General Secretariat of Civil Protection concerning the coronavirus questionnaire on forma.gov.gr' (Υποβολή Ερωτήσεων στη ΓΓΠΠ αναφορικά με το ερωτηματολόγιο κορωνοϊού στο forma.gov.gr) (30 April 2020): click here.
• Pappa, Evelina, 'Coronavirus, temperature measurement and pesonal data protection (Κορωνοϊός, θερμομέτρηση και προστασία προσωπικών δεδομένων)', Lawspot (1 May 2020): click here.

• Olivi, Giangiacomo and Bocchi, Chiara, 'Italy Coronavirus legal updates - Daily alert Coronavirus: updates on privacy issues', Dentons (since March 2020): click here.
• Cooper, Dan and Luca Tosoni, 'Italian Supervisory Authority Publishes COVID-19 Guidance', Inside Privacy (4 March 2020): click here.
• Spadaro, Alessandra, 'Do the containment measures taken by Italy in relation to COVID-19 comply with human rights law?', EJIL Talk! (16 March 2020): click here.
• Pizzetti, Franco, 'A rischio le libertà dei cittadini, urgente un intervento giuridico', Agenda Digitale (23 March 2020): click here.

Kajosevic, Samir:

• 'Concern for Rights in Montenegro amid COVID-19 Fight', Balkan Insight (26 March 2020): click here.
• 'Montenegrin Coronavirus Patients’ Identities Exposed Online', Balkan Insight (18 March 2020): click here.

• Hunton Andrews Kurth, 'Dutch DPA Publishes Recommendations Regarding COVID-19 and Privacy in the Workplace', Privacy & Information Security Law Blog (25 March 2020): click here.
• Manancourt, Vincent, 'Dutch privacy regulator says ‘not possible’ to anonymize telecom location data' POLITICO (2 April 2020): click here.
• Jacobs, Bart, 'Met een app weer naar buiten', iBestuur Online (7 April 2020): click here.
• Letter to the Dutch Ministries of General Affairs, of Health, Well-being and Sport and of Justice and Legal Protection signed by academics in the Netherlands, 'COVID-19 tracking-and tracing app and health app' (13 April 2020): click here (English version in pdf).
• Stollmeyer, Alice and Marietje Schaake, Frank Dignum, 'Opinion: The Dutch tracing app 'soap opera' - lessons for Europe', EUObserver (7 May 2020): click here.
• Tweede Kamer, 'Tijdelijke wet informatieverstrekking RIVM in verband met COVID-19' (since 29 May 2020): click here.
• Kasteleijn, Nando, 'Privacywaakhond: huidig wetsvoorstel telecomdata delen RIVM niet invoeren', NOS nieuws (3 July 2020): click here.

• Polish Ministry of Digitization (Ministerstwo Cyfryzacji), 'Aplikacja „Kwarantanna domowa” – ruszył proces jej udostępniania' (19 March 2020): click here.
• Koschalka, Ben, 'Quarantined Poles can confirm their location with selfies using new government app', Notes from Poland (20 March 2020): click here.

• Agência para a Modernização Administrativa , Estamos ON - Covid19: click here (Info app).
• Registo Viajante: click here (app for travellers to Portugal already in place before corona)

• Muñoz, Ramón, 'Más de 40 millones de teléfonos móviles serán usados para rastrear el coronavirus en toda España', El País (2 April 2020): click here.
• Martínez Martínez, Ricard, 'A la muerte por protección de datos', LOPD y Seguridad (11 March 2020): click here.
• Pérez Colomé, Jordi 'Expertos en privacidad admiten que la crisis permite un uso excepcional de datos personales', El País (21 March 2020): click here.

• Liberty page on 'Civil liberties in the coronavirus crisis': click here.
• Ward, Andrea, 'Data Protection Issues Raised by Guidance and Efforts to Prevent the Spread of COVID-19', The National Law Review (9 March 2020): click here.
• National Cyber Security Centre:
  • 'Weekly Threat Report: Coronavirus used as bait by phishers' (13 March 2020): click here.
  • 'Weekly Threat Report: NCSC issue advice as home working increases across the UK' (20 March 2020): click here.
• DefendDigitalMe, 'edTech in a time of Coronavirus: reflection, realism, and rights' (20 March 2020): click here.
• Hern, Alex, 'UK privacy activists raise fears over social distancing tracking', The Guardian (20 March 2020): click here.
• Department of Health and Social Care, 'Coronavirus (COVID-19): notification to organisations to share information' (1 April 2020): click here.
• Lewis, Paul, David Conn and David Pegg, 'UK government using confidential patient data in coronavirus response', The Guardian (12 April 2020): click here.
• Proctor, Kate and Hannah Devlin, 'Coronavirus UK: health passports 'possible in months'', The Guardian (4 May 2020): click here.