Recommendation 13

We have strong concerns about the data protection risks that are involved in establishing a Covid-status certification system. Again, given that the Government have not established a clear scientific case, nor a good overriding public interest Covid-Status Certification 33 case, for the introduction of a Covid-status certification system, establishing the infrastructure necessary for such a system is an ineffective use of resources that cannot be justified. Furthermore, if a certificate system were introduced the Government would be introducing a system fraught with data protection and security risks. The Committee believes that the Data Protection Impact Assessment for any app hosting a Covid-status certificate should be published.