The German data protection authorities have requested improvements to the Luca app for corona contact tracking. The provider of the app had “partially dealt with” previously identified risks, according to a statement published on Monday in Saarbrücken by the conference of the independent data protection supervisory authorities of the federal and state governments (DSK). “The DSK nevertheless calls on the company to make further adjustments to the system in order to further increase the protection of the people taking part.”
With the app you can log into restaurants or cinemas, for example, with a kind of virtual business card. The Luca app, for which hip-hop singer Smudo from the “Fantastischen Vier” had advertised, is already being used by Mecklenburg-Western Pomerania, Thuringia and Baden-Württemberg to track contacts. Berlin, Brandenburg, Lower Saxony, Bremen, Hamburg, Schleswig-Holstein, Hesse, Rhineland-Palatinate, Saxony-Anhalt and Saarland are planning to use the app.
Decentralized data storage required
The privacy advocates said, currently the data collected by Luca is stored in a central location. Therefore, they want to discuss with the operator of the app to what extent decentralized storage is possible. In addition, the decryption of the data must be thought again. Compliance with basic safety principles must be demonstrated.
The DSK will develop “an independent guide for all operators of such contact tracing systems” and “publish it at short notice”. The legislature was asked to “create nationally uniform legal regulations for digital contact tracking”. Saarland is currently chairing the DSK.