search

corona-warn-app / cwa-wishlist

Central repository to collect community feature requests and improvements. The CWA development ends on May 31, 2023. You still can warn other users until April 30, 2023. More information:
https://coronawarn.app/en/faq/#ramp_down
Apache License 2.0
105 stars 14 forks source link

Verknüpfung mit dem neuen (digital) Personalausweis #459

Open Pozzdamm opened 3 years ago

Pozzdamm commented 3 years ago

Feature description

Die Download-Anzahl der Corona Warnapp steigt ja (wieder) an. Optional wäre eine Verknüpfung mit dem digitalen Personalauweis sinnvoll, damit bei freiwilliger Freigabe der Daten die validierten Adressdaten an das bezogen auf das gültige Adressdatum entsprechende Gesundheitsam weitergegeben werden können.

Problem and motivation

Is this something you're interested in working on

jucktnich commented 3 years ago

I'm not sure, but I think Apple and google won't pass such an update.

MikeMcC399 commented 3 years ago

To find the local Health Authority (Gesundheitsamt) there is a link in the FAQs https://www.coronawarn.app/en/faq/#who_can_help to the RK page https://tools.rki.de/PLZTool. An exact user address is not necessary. The form accepts either a post code (Postleitzahl) or a place.

If an infected user decides to forward their Contact Journal from the app to the Health Authority this is done outside the app, by using "Export Entries" in CWA. Afterwards all other actions do not involve the app. Probably a user would review and modify the list before forwarding it, also adding their own contact details, which are not stored in the app.

Apart from the comments in the previous posting https://github.com/corona-warn-app/cwa-wishlist/issues/459#issuecomment-821819550, the Privacy Notice is also relevant, which says:

"5. What data is processed? The app’s entire system has been programmed to process as little personal data as possible. This means that, when you use exposure logging, warn other users, or retrieve a test result, the system does not collect any data that would allow the RKI or other users to infer your identity, your name, your location or other personal details."

So collecting a user's identity using a German National Identity Card would conflict with the Privacy Notice.

I imagine to implement the proposed functionality would mean obtaining a certificate and integrating with suitable software such as the AusweisApp2. That seems quite a high effort just to find out a user's postcode.

dsarkar commented 3 years ago

@Pozzdamm @jucktnich @MikeMcC399 Thanks for proposal and comments on it. We will keep this issue open for discussion and visibility. However, as already pointed out in the comments above, at this stage it is clear that such an integration of tracing functionalities and personal identification in the same app will not pass the audits of the Google/Apple stores. Furthermore, the acceptance and trustworthiness of this app relies specifically on data protection and preserving privacy (and others, e.g. open-source code, ... ).

Having said this, any suggestions should be discussed and evaluated here, it might lead to new, interesting and more feasible proposals.

Nice Sunday to everybody. Best, DS

Corona-Warn-App Open Source Team

Ein-Tim commented 3 years ago

As this issue has already been declined and there is no active discussion concerning this topic at the moment, I suggest to close this issue.

base2code commented 2 years ago

Is it possible to add an option to optionally add an identity card to identify the user? If there is an explicit popup to show the user that the ID is only stored locally and only sent to the server once for validation. This would speed up the vaccination validation process at e.g. restaurants.

In contrast to the initial request the ID should not be used to forward the user data to the local Health Authority.