Colombia covid information apps break national data protection law

An audit of two apps and a website used by national and local governments in Colombia finds: an absence of public information about the tools, how they work, or how their security and privacy is protected; non-compliance with Colombia’s data protection legal framework, particularly in the area of consent; and reckless deployment of solutions that put hundreds of thousands of users’ personal data at risk. Fundación Karisma, which conducted the audit, makes a number of recommendations for remediation and reminds that technology is no substitute for good public policies.

Writer: Stéphane Labarthe and Andrés Velasquez

Source: Fundación Karisma (also available in Spanish)