Norway will use the Apple-Google API to replace its failed COVID-19 app
After the privacy issues surrounding its first attempt at a contact tracing app, Norway is planning to develop a second, this time using the privacy-focused technology produced in Apple and Google's joint project.
The NHS COVID-19 app used in the United Kingdom, which uses the Apple-Google API.
Norway is set to become the next country to develop an app for tracing the spread of COVID-19 across the population, one that will use Apple and Google's contact tracing system. The technology, which is used to keep track of when people get in close proximity to others and whether they are at risk of infection from a carrier, will be at the heart of the new app for Norway, following the country's troubled first attempt.
Health minister Bent Hoeie advised to Reuters on Monday that the app would use the Apple-Google system, instead of a home-grown version. "This app is purely for tracking infection, it doesn't store data centrally," stressed Hoeie.
The initial app, Smittestopp (translated as "infection stop"), was launched in April as an early attempt to use apps to monitor the spread of the virus, as well as to inform users if they were at risk following contact with someone who carried it.
However, as the app collected data and stored it in a central location, it came under fire from data agency Datatilsynet in June. The Guardian reports the agency issued a warning that it would stop the Norwegian Institute of Public Health from handling the data collected by the app.
The agency believed the relatively low usage of the app by 600,000 of Norway's 5.4 million population, coupled with the limited spread of the virus in the country, meant there was too much of an invasion of privacy, disproportionate to its effectiveness. Though the health institute disagreed with the findings, it confirmed it would suspend work on the app and delete collected data.
Under the new app, the data would be decentralized and highly anonymized, with privacy informing its design. Data is stored on the device locally instead of on a server, but anonymous identifier beacons would be shared to the rest of the network if the user is positively diagnosed, only with the user's permission.
Norway follows many other countries in using the technology, and it's not the only one to switch tactics during the pandemic. The United Kingdom's app was originally built using a centralized system, but was later reconstructed to use the Apple-Google API.
The NHS COVID-19 app used in the United Kingdom, which uses the Apple-Google API.
Norway is set to become the next country to develop an app for tracing the spread of COVID-19 across the population, one that will use Apple and Google's contact tracing system. The technology, which is used to keep track of when people get in close proximity to others and whether they are at risk of infection from a carrier, will be at the heart of the new app for Norway, following the country's troubled first attempt.
Health minister Bent Hoeie advised to Reuters on Monday that the app would use the Apple-Google system, instead of a home-grown version. "This app is purely for tracking infection, it doesn't store data centrally," stressed Hoeie.
The initial app, Smittestopp (translated as "infection stop"), was launched in April as an early attempt to use apps to monitor the spread of the virus, as well as to inform users if they were at risk following contact with someone who carried it.
However, as the app collected data and stored it in a central location, it came under fire from data agency Datatilsynet in June. The Guardian reports the agency issued a warning that it would stop the Norwegian Institute of Public Health from handling the data collected by the app.
The agency believed the relatively low usage of the app by 600,000 of Norway's 5.4 million population, coupled with the limited spread of the virus in the country, meant there was too much of an invasion of privacy, disproportionate to its effectiveness. Though the health institute disagreed with the findings, it confirmed it would suspend work on the app and delete collected data.
Under the new app, the data would be decentralized and highly anonymized, with privacy informing its design. Data is stored on the device locally instead of on a server, but anonymous identifier beacons would be shared to the rest of the network if the user is positively diagnosed, only with the user's permission.
Norway follows many other countries in using the technology, and it's not the only one to switch tactics during the pandemic. The United Kingdom's app was originally built using a centralized system, but was later reconstructed to use the Apple-Google API.
Comments
It's more about individual states having their own laws and regulations, especially when it comes to health. I am just surprised that Apple and Google didn't create a generic app that others could just slightly modify for localization and use it instead of creating one from the ground up?
Oh and BTW II can't agree with DED's opinion on how he thinks this Apple/GoogleAPI was developed, which claims Apple is fibbing a bit about its roots and further claim Google doesn't care anyway. No reason for Apple to lie or mislead on a public safety initiative (casting doubt on future PR statements), and there's ample evidence too that Google has seen the light, bringing a new commitment to safeguarding personal privacy. They are much more in tune with Apple over the past several months and I believe this partnership is an honest one.
Mmm.
I'm not sure that they could build an app generic enough to fit every country's IT infrastructure. Which database would it support? How would it plug into their messaging systems. I think they took the best approach: just give them a standard API for interrogating a secure token system built into the operating system.
It's just as bad over here.
The UK government ignored the advice of just about every IT specialist available and built their own system that drained phones like no one's business.
Then, after months of delay, they released an app based around the Apple/Google framework – but it will only accept test results from a private company which is no doubt run by one of their rich friends. It does not accept test results from tests administered by the National Health Service.
This country is being run like a 'Yes Minister' series, except no one's laughing.