The Business Times

HK testing travellers' saliva in fight to control Covid-19

Privacy experts worry as biodata, being very revealing, are valuable to hackers or repressive govts

Published Wed, May 6, 2020 · 09:50 PM

Hong Kong

LAYLA Keith had just gotten off a flight from Singapore when she and her fellow passengers were met at the gate by Hong Kong government officials and ushered onto buses that shuttled them to a nearby convention centre. There, they were handed forms to fill out and given small containers to spit into.

"They just put all the samples in a tray and told us to go," said Ms Keith, a junior at an international high school in the city. "We didn't really have a choice." Those who tested positive for the novel coronavirus were sent to a hospital for treatment; others were allowed to go. But the data from their saliva stayed behind in a government database.

In the global battle to curb Covid-19, governments have collected troves of data from testing and contact-tracing apps to try to find the disease and stop its spread.

Even as many are willing to surrender personal information amid the crisis, privacy experts worry about who controls the data and what will happen to it after the crisis ends.

Hong Kong began imposing stricter measures on travellers after a rebound in Covid-19 cases was brought on by residents returning from more severely stricken areas.

GET BT IN YOUR INBOX DAILY

Start and end each day with the latest news stories and analyses delivered straight to your inbox.

VIEW ALL

Non-residents were banned from entry, and a mandatory quarantine was required for those returning home. On April 8, incoming travellers were required to submit "deep throat saliva" tests, after being shuttled to a nearby centre. From April 22, asymptomatic passengers had to wait for their test results before being allowed to leave.

Even as contact tracing apps have raised concerns about state surveillance, the involuntary surrender of DNA or other biodata takes it a step further, providing governments with sensitive and unchangeable fragments of personal identity. Saliva samples are used by DNA testing companies, for instance, to glean insights on ancestry, certain traits and predisposition to certain health ailments.

In Hong Kong, where pro-Democracy protests continue, some worry that the pandemic may give government officials the opportunity to make restrictions on privacy permanent. How Hong Kong uses the biodata it collects from travellers could provide some detail on whether or how that might happen.

"The problem of collection of biodata in the age of artificial intelligence and big data is a concern globally, especially in the administration of cross-border travel, where governments around the world are increasingly collecting and storing travellers' data, from fingerprints to facial recognition to saliva," said Maya Wang, a senior researcher at Human Rights Watch. "Travellers, and in particular foreigners, don't have rights to challenge this collection or this use or storage, and have very little ability to seek redress," she said.

Biodata can be particularly revealing and therefore valuable to hackers or repressive governments. It could expose medical histories or contribute to selective surveillance of political activists. It could also compromise a person's ability to get insurance or open a bank account, experts warn. In China, the authorities are already using DNA data to keep track of the Uighur population.

Hong Kong's health ministry told Bloomberg News that it would dispose of the saliva samples according to laboratory protocols, but it didn't say what those were. In forms that travellers fill out on arrival at the airport, they are told that the government "will take all practicable steps to ensure that personal data is not kept longer than necessary".

The ministry also said the data would be accessible to government departments where deemed necessary. However it was not clear whether this referred to the passengers' travel and personal history, or the data yielded from the saliva samples.

The authorities should be using saliva to determine if someone is infected with Covid-19 and then disposing of the sample, said David Murdoch, dean of the University of Otago in Christchurch, New Zealand, and a specialist in infectious diseases.

Governments should not try to pull additional information from such a sample without a person's consent, he said.

Some governments, like Singapore's, have vowed to delete any private data or anonymise them as much as possible.

In Hong Kong, the authorities have recently stepped up efforts to rein in the pro-democracy camp with arrests of prominent activists and lawmakers, while Beijing has asserted the right to comment on the city's politics.

That has spurred worries among some lawmakers that departments outside of health authorities would use that data, and further, that Beijing's representatives in the territory might also lay claim to that information.

"I have to say that not a lot of people have really thought about it yet, the potential implications for collecting this data," said Charles Mok, a member of Hong Kong's Legislative Council who represents the information technology constituency. "We should get clarification from the government, at the very least it should tell us how they are going to dispose of the data and tell us this is the only test they are carrying out with the samples," he said.

One problem is that Hong Kong's personal data and privacy law, which hasn't been updated since it was enacted in 1996, makes no accommodation for facial images or biodata, said Ms Wang of Human Rights Watch. "That's why the privacy data ordinance needs to be updated," she said. "The government has not given us any satisfactory information on why it hasn't been enacted all these years."

James Hazel, a research fellow at Vanderbilt University Medical Centre, who studies privacy policies concerning the collection, use and sharing of genetic data, said the European Union tends to have stronger regulations on how biodata such as DNA can be used. In the US, he said, the secondary use of such data depends on the context - rules governing physicians or researchers are generally more strict than those for a DNA company receiving voluntarily samples from customers.

Hong Kong is not the only place where personal data and politics are interwoven. Vietnam currently greets travellers with swab tests on arrival, and officials say the records of every test result are retained but that it is against the law to reveal anyone's name.

But as other countries move to loosen restriction on travellers, Hong Kong - where cases have nearly trickled to a halt - offers one model for how to track the infection in people entering the country.

Some travellers into Hong Kong did not seem too concerned, based on recent comments on Facebook support groups discussing Hong Kong's arrival process.

People swapped tips on keeping children entertained and suggested bringing food and additional water for obligatory hotel stays managed by the government for afternoon arrivals.

But what happened to their saliva, or the forms they have signed agreeing to submit the samples, were not a topic of conversation.

While arriving at a European airport that is protected by stringent privacy laws might be less intrusive on travellers, anyone wanting to do business in Hong Kong - 71 million people travelled through the international airport last year - will have to spit in a cup, at least for now.

"If nothing else, it is important for Hong Kong to be transparent about the details of the programme so that travellers can use that information in determining whether they want to travel to Hong Kong or not," said Glenn Cohen, a Harvard University law professor and expert on the intersection of bioethics and the law. BLOOMBERG

KEYWORDS IN THIS ARTICLE

BT is now on Telegram!

For daily updates on weekdays and specially selected content for the weekend. Subscribe to  t.me/BizTimes

Technology

SUPPORT SOUTH-EAST ASIA'S LEADING FINANCIAL DAILY

Get the latest coverage and full access to all BT premium content.

SUBSCRIBE NOW

Browse corporate subscription here