Contact tracing during the COVID-19 pandemic: Protection of personal information in South Africa

Containing the COVID-19 pandemic necessitates the use of personal information without the consent of the person. The protection of personal information is fundamental to the rights that ensure an open and democratic society. When regulations that limit the right to privacy are issued outside of the democratic process, every effort must be made to protect personal information and privacy. The limitation of human rights must be treated as an exception to the norm, and any regulations should be drafted to ensure minimum limitation of rights, rather than to the minimum acceptable standard. The contact tracing regulations included in the COVID-19 disaster regulations include some basic principles to ensure privacy; however, other important principles are not addressed. These include principles of transparency and data security. The envisaged future use of human data for research purposes, albeit de-identified, needs to be addressed by the COVID-19 designated judge appointed under the regulations.