Protocol For Exclusion: Why Covid-19 Vaccine "Passports" Threaten Human Rights
As the global COVID-19 vaccine rollout gains momentum, governments from Bahrain to Denmark are clamoring to implement measures to help the world return to pre-virus normality. This includes exploring digital vaccine certificates — or COVID-19 vaccine “passports” — that would record and authenticate a person’s vaccination status. Current proposals, however, threaten human rights by creating space for exclusion and discrimination to flourish, and posing serious long-term threats to the privacy and security of millions of people across the globe.
To help inform decision-makers — including governments evaluating proposals, private sector actors supporting the global vaccination effort, and experts formulating public health guidance — and ensure human rights are at the core of any new digital vaccine system, Access Now is launching Protocol for exclusion: why COVID-19 vaccine "passports" threaten human rights.
“COVID-19 is a disease that targets, isolates, and disproportionately affects those already most at risk. A COVID-19 vaccine ‘passport’ that does the same is no solution to combating this unwaning global pandemic,” said Verónica Arroyo, Policy Associate - Latin America at Access Now. “Governments must design and implement systems that put people first, supporting vaccine rollouts rather than contributing to a world where people are split between haves and havenots.”
From inadequate health care access, to increased economic instability, COVID-19 has imposed the highest toll on individuals and communities already marginalized and underserved. Further risks of exclusion and discrimination, and threats to privacy and security include:
- Unequal access to vaccines: Creating divides within and between nations, some countries have secured vaccines for their entire population, others have a partial supply, and many have no vaccination programs in sight.
- Restrictions to freedom of movement and access to services: Digital vaccine certificates could form the basis of access or denial from international travel or, in the cases of Israel and Denmark, potentially deny or grant access to domestic services and spaces.
- Mass collection and processing of health data: Any system would require the collection of personal information, putting individuals’ privacy at risk, and must be protected.
- Entrenchment and proliferation of centralized digital identity systems: Centralized systems carry risks of surveillance, profiling, exclusion, privacy violations, and cybersecurity threats.
“Governments across the globe are rushing to implement new technologies as the catch-all solution for returning to a post-pandemic normal. But in their haste, many have dismissed or ignored the risks of these fast-tracked tools, including digital vaccine certificates,” said Carolyn Tackett, Deputy Advocacy Director at Access Now. “Policymakers, corporations, and developers must all put these potential dangers front and center and actively work to prevent them.”
From the African Union to the European Union, this new report explores and evaluates the human rights impacts of current digital identity programs, biometrics, and early proposals for digital health certificates, as a foundation for any future global mechanisms.
Recommendations for decision-makers include:
- Do what is effective, not what is trending: Prioritize people and their needs, not a technical tool, and optimize for solutions that are less intrusive and that do not hinder rollout of COVID-19 vaccines.
- Prioritize data protection: Minimize data collection and retention, meet and surpass legal requirements, and follow privacy-by-design principles to ensure robust respect for human rights.
- Be transparent in design and implementation: Use open source tools, be aware of uncertainties, consult civil society, audit potential new tools with care, and communicate clearly with the public.
- Be equitable and inclusive: Access to any digital vaccine certificate should be free of charge, accessible, and paired with easily accessible paper-based forms as an interchangeable alternative. All approved vaccines should hold the same value.
- Focus: Digital vaccine certificates must not be treated as a vehicle for accelerating digital transformation more broadly.
- Prevent abuse — now and in the future: Include strict data retention periods in any public policy approving the use of a digital vaccine certificate, and any collection of COVID-19-related data. Governments and companies must refrain from capitalizing on COVID-19 vaccination efforts to expand surveillance, silence dissent, or restrict freedom of expression, assembly, and movement.
- Don’t create division: Systems that make digital vaccine certificates a requirement will divide and exclude. The COVID-19 vaccination process is an opportunity to focus our efforts on protecting the vulnerable populations who have been most severely impacted.
Read the report.
Read this media alert via the Access Now website.