"/>

- PAe AEPD communiqué on apps and websites of self Coronavirus
the accesskey _ mod _ content

The release AEPD on apps and websites of self Coronavirus

27 March 2020

En la actual situación de emergencia sanitaria derivada de la extensión del virus COVID-19 se están desarrollando iniciativas que implican un elevado volumen de tratamientos de datos personales y, especialmente, de datos sensibles como los de salud.

Esta situación de emergencia no puede suponer una suspensión del derecho fundamental a la protección de datos personales. Pero, al mismo tiempo, la normativa de protección de datos no puede utilizarse para obstaculizar o limitar la efectividad de las medidas que adopten las autoridades competentes, especialmente las sanitarias, en la lucha contra la epidemia, ya que en ella se prevén soluciones que permiten compatibilizar el uso lícito de los datos personales con las medidas necesarias para garantizar eficazmente el bien común. Para ello, la Agencia está colaborando con las autoridades competentes facilitándoles criterios que permitan compatibilizarlos.

The Spanish Protcción agency data (Opens in new window) (AEPD) has found that they are launching initiatives, both from the public sphere as from the private, requesting that citizens provide personal information, primarily related to health, under the emergency living our country. These initiatives have a broad spectrum, from the Local to global, and use apps or websites.

Ante esta situación, la AEPD recuerda los criterios que deben aplicarse para que el tratamiento de los datos personales sea lícito.

The foundations that legitimize/enable these treatments are the need to address the missions undertaken in the public interest, as well as ensuring the vital interests of the affected themselves or of third persons.

The purposes for which can be treated data are solely those related to the control of the epidemic, including offer information on the use of self applications made by public administrations or obtaining Statistics with aggregate geolocation data to offer maps to report on areas of a greater or lesser risk.

Data that can be obtained and used must be the competent public authorities deem provided/needed to comply with these purposes.

This data may only be provided by those who are over 16 years. In the case of address data from under 16 years, it would require the consent of their parents or legal representatives.

Únicamente podrán tratar dichos datos las autoridades públicas competentes para actuar conforme a la declaración del estado de alarma, es decir, el Ministerio de Sanidad y las Consejerías de Sanidad de las Comunidades Autónomas, que podrán cederse datos entre ellas, y a los profesionales sanitarios que traten a los pacientes o que intervengan en el control de la epidemia.

Private entities that collaborate with those authorities may only use data according to the instructions of these and, in any case, for purposes other than those authorized.

Si los ciudadanos utilizan aplicaciones o webs de las que no son titulares las autoridades públicas, sino que son ofrecidos por entidades o personas privadas, no existirá la legitimidad que se ha indicado anteriormente para el tratamiento de los datos. En este sentido, es importante recomendar a los ciudadanos que sean especialmente cuidadosos a la hora de informarse de quién, para qué y con qué garantías van a tratarse sus datos personales.

Regarding the anticipation that all those citizens who gave positive in the test of COVID-19 may be geolocalizados via mobile phone who have provided previously, so that you can keep track of your quarantine, must start again from the extensive powers in exceptional situations, undoubtedly is this epidemic, have health authorities, bearing in mind, furthermore, that one of the exceptional measures for managing the situation of health crisis caused by the COVID-19 is to limit freedom of movement of people.

Again, we have a duty imposed by the health authorities in order to prevent the spread of the virus, and that requires a special control of persons who have given positive and that have been forced to remain at home in quarantine, and also to learn about areas with the largest number of affected in order to take appropriate action.

No obstante, el único dato que a los efectos de la geolocalización debería facilitarse a los operadores de telecomunicaciones, en su caso, sería el correspondiente al número de teléfono móvil que se tiene que geolocalizar, salvo que el Ministerio de Sanidad considerara que fuera imprescindible facilitar algún otro dato a los efectos del seguimiento de la enfermedad.

In any case, those who seek and treat the data of citizens should inform them in a clear, accessible and understandable for all aspects that have been described.

Likewise, the AEPD has hosted on your website two documents of interest to citizens and businesses:

Original source of the news (Opens in new window)

  • Citizen
  • Security
General access point
 
General access point