UK's NHS under fire for its contact-tracing mobile phone app

London

THE UK took its own route into a coronavirus lockdown, and now appears to be pursuing its own route out as well, developing a contact-tracing mobile-phone app that works differently from those favoured by many other countries.

The app, rolled out for trial on the Isle of Wight Thursday, is central to the efforts of Prime Minister Boris Johnson's government to end the restrictions that have shut much of the British economy. If people can be quickly isolated after they have come into contact with an infected person, others can be allowed to go about their lives.

But success depends on the app working, and on very large numbers of people trusting the government with their data. Privacy campaigners and data scientists warned that the UK is putting both of those at risk by adopting its own model, rather than the one supported by Alphabet Inc's Google and Apple Inc.

"The National Health Service (NHS) does not have a good record with this - moving really fast, nimbly, understanding technology," said Neil Bacon, a doctor and founder of information-sharing networks Doctors.net.uk and iWantGreatCare. org "People are right to raise more than an eyebrow when they see that the NHS is going left and Google, Apple, and most of the world is going right."

From initially resisting calls for a lockdown to failing to join a European Union effort to buy much-needed personal protective equipment, the UK has gone its own way during the pandemic, with questionable results. Britain is now the European country with the highest level of Covid-19 deaths.

GET BT IN YOUR INBOX DAILY

Start and end each day with the latest news stories and analyses delivered straight to your inbox.

Sign UpVIEW ALL

With the US, Germany, Italy and others leaning towards the model supported by the American tech giants, some academics, lawmakers and members of the general public have suggested that Britain could be making another misstep.

The government disagrees. "The NHS app will significantly speed up contact tracing and help us stop the spread of the virus," the Department of Health and Social Care said in a statement. "It is a key part of our wider strategy of testing and tracing, and will enable us to alert those most at risk of infection so they can take action to protect themselves, the people they care about and the NHS."

Both the UK and other countries' approaches use Bluetooth on smartphones to detect and keep track of who a person meets - raising questions about privacy. Tracing apps supported by Apple and Google try to mitigate those risks by using a "decentralised" model that keeps the contact information on an individual's phone.

Under this approach, each phone regularly checks in with a central server to determine whether it has been near someone on an anonymous list of users who have tested positive for Covid-19. If it has, the owner is notified.

The UK argued that this misses the opportunity to study how the virus is spread, and is proposing a "centralised" model. With its method, a user who develops coronavirus symptoms presses a button on the app, which then uploads its record of contacts to a central server. Those are then decrypted and messages are sent to each affected person.

Matthew Gould, chief executive officer of the health service's digital arm, NHSX, which is developing the app, pointed out the benefits of the British model when he appeared before a parliamentary committee on May 4. It allows scientists to get more information about how the virus spreads.

"We are balancing privacy with the need for the public health authorities to get insight into what symptoms subsequently lead to people testing positive," he said.

The British setup would also make it easier to inform people if their contact who showed symptoms subsequently tested negative for the virus.

But the merits of a centralised model could be outweighed if they come at the cost of trust, even though the UK app never asks for a user's name.

"This is essentially usable as a surveillance system. I'm not saying they intend to use it as that, but they could use it as that," said Mark Ryan, a professor in computer security at the University of Birmingham. "What I would really like to see is a much clearer statement about how this data can be used, how it's being siloed from other databases, and what kind of end they can promise" to its use. BLOOMBERG