Opt-In and related discussion to Choice, transparency and disclosure

Opt In should be for the person traced. They should have full disclosure of the data collected and who has access to that data. I should also have the ability to opt out or an automatic expiration after a certain number of days associated with my positive diagnosis

This is interesting. Can you please explain more about 'automatic expiration'?

automatic expiration occurs 14 days from a positive test or whatever length of time the authorities deem appropriate

Would we allow the user to set the time limit for automatic expiration? For example, I saw a new Nature letter where a CoV-2 patient was admitted to the hospital and diagnosed with COVID-19. They eventually had three nasal swabs that showed they were free, but then had a fatal heart attack soon after they were discharged. Since the patient was CoV-2 positive, the family allowed the authors of the paper to conduct an autopsy, where CoV-2 was discovered in lung tissue. Now, the letter didn't say how long the patient was treated before nasal swabs were applied. So if authorities decide that this letter says the minimum should not be four weeks, does the user have any say in that?

I could see where doctors can and should permit the removal of exposure tags prior to the automated expiry, for false positives. But I think the automatic expiry will be set at a window which exceeds greatest known time of test to recovery

I am thinking Expiry and Auto Expiry might be its own thread - Michelle? Like the rules around it specifically. I think we might achieve consensus on that relatively quickly with some use of language like the legal term "reasonable" length of time. It isn't too rigid and can be applied to the authorities decision on reasonable, which will not be uniform the world around

Yes, I agree. I will create a new thread about Expiry. Anyone who is interested in joining this discussion should let me know and I'll add you.

I don't know if this falls under what @Ryan Carrier stated above, but I think opt-in should also allow the user to restrict for what purpose the data is shared between third parties. For example, I can select "Only share with municipal health authorities" or "Do not share with users outside of my country of residence". I'm not a UX designer, so I can't comment on how often the opt-in needs to occur.

From Blue Trace

2. Opt-in consents. COVIDSafe is enabled by users’ opt-in consent in respect of the following:

• users must provide consent before the application enables communications with other users;
  
  

• users who have been diagnosed COVID-19 positive may voluntarily provide this information to the application (if they do so, this is submitted to a centralised backend server enabling contact tracing to be conducted); and
  
  

• users may voluntarily upload data gathered through COVIDSafe onto the data store allowing health authorities to provide notice of at-risk interactions (the app data is stored locally on the user’s device until consent is provided).

Very quickly, we will see a conflict between opt-In and "public health". Only 25% are using it. The Straits Times already advocating for Mandatory... https://www.straitstimes.com/singapore/no-other-way-but-to-make-use-of-tracetogether-mandatory