The EU Digital COVID Certificate: A Preliminary Data Protection Impact Assessment. (6th June 2021)

• Record Type: Journal Article
• Authors: GSTREIN, Oskar Josef
• Editors: Alemanno, Alberto; Bialasiewicz, Luiza
• Is Part Of: European journal of risk regulation. Volume 12:Number 2(2021)
• Page Start: 370
• Page End: 381
• Publication Date: 2021-06-06
• Subjects: Risk management -- Periodicals; Risk management -- Europe -- Periodicals; Periodicals; 363.102
• DOI: 10.1017/err.2021.29
• Languages: English
• ISSNs: 1867-299X

Abstract

Abstract : On 20 May 2021, the European Commission, Council and Parliament announced a breakthrough in the trialogue negotiations to establish the European Union (EU) Digital COVID Certificate. Originally, this standardisation effort was labelled as "Digital Green Certificate" and – "[i]n view of the urgency" – presented without a data protection impact assessment. It should allow citizens and residents of Member States to prove that they are either vaccinated against COVID-19, have recently tested negative or are currently immune against the virus. This article considers the proposal from a privacy perspective, taking into account the opinion of EU data protection authorities, ongoing negotiations in the EU institutions and relevant developments on the national and international level. While the European Parliament and others tried to improve the original Commission proposal, questions around the appropriateness and effectiveness of the framework remain. The technological and organisational implementation is essentially left to Member States, who already have started to develop their own tracing and identification systems.