Policing the pandemic: Australia’s technology response to COVID-19 · Global Voices
EngageMedia

Image courtesy EngageMedia.
This article by Samantha Floreani is part of Pandemic of Control, a series that aims to further public discourse on the rise of digital authoritarianism in the Asia-Pacific amid COVID-19. The Pandemic of Control is an initiative by EngageMedia, in partnership with CommonEdge. This edited version of the article is republished in Global Voices under a content partnership agreement.
In early 2020, COVID-19 took hold in Australia. The government policy evolved to become “zero COVID,” enforced through the donning of masks, social distancing, and oftentimes, lockdowns. Suddenly, almost every aspect of our lives moved online.
In times of crisis, governments often rush through additional powers, many of which put human rights at risk, and are rarely wound back once we return to relative calm. The ubiquitous technologies of the digital age, combined with a pandemic requiring us to isolate ourselves from each other, tilled the soil for a future where digital surveillance and control could bloom. In anticipation of this, human rights advocates urged governments to uphold human rights in any technological response to COVID-19. As lawyer and digital rights activist Lizzie O’Shea puts it:
What will get us through this virus is not coercion and fear, but advocating for and carrying out the politics of care and solidarity.
Digital technologies can play an important role in supporting a robust public health response. The question is not if we should use technology, but how. The technological choices made by Australia’s state and federal governments during this time speak volumes about their priorities and ideologies. The past two years reflect a trend: rather than employing technologies to enhance care and support of the population they were responsible for, governments in Australia prioritised politically buzzworthy projects based on an ideology of surveillance and control.
This piece examines four technology-based government responses to the COVID-19 pandemic. These, coupled with avoiding transparency and a reluctance to engage with technical experts and civil society, ultimately resulted in technological “solutions” that ranged from outright ineffective to actively punitive.
In late 2020, Australian media outlets reported that Victoria and New South Wales Police were using drones to monitor and enforce COVID-19 rules in public spaces. This created significant unease among the public about surveillance capacities, at which Victoria Police attempted to publicly reassure people. Alongside this, mobile camera surveillance units were deployed throughout parks and other public spaces, and CCTV was repurposed to police COVID-19 restrictions, to the public’s dismay and anger. Many criticised the government’s aggressive and punitive approach to monitoring and fining individuals breaking lockdown rules, and expressed concern that governments were overstepping their authority without adequate safeguards, transparency, or accountability requirements.
In April 2020, the federal government released the COVIDSafe contact tracing app. It was accompanied by a swathe of political rhetoric to convince people to download it. We heard moralising wartime metaphors, claims that the app would offer protection from infection “like sunscreen,” and patriotic calls to join “Team Australia.” The Australian public was told that 40 percent uptake was needed — a number which, it would later be revealed, was based on nothing. Over 7 million people downloaded the app, but distrust of the government’s technical ability, mishandling of privacy and security concerns, and technical flaws in the app’s design all contributed to downloads never reaching the made-up target.
The app was designed to use Bluetooth to detect and record unique identifiers of nearby phones, provided they were also using the app. If a person tested COVID-19 positive, the list of all those they came into contact with was sent to the government, which then notified those who may be at risk. Crucially, it was found that the app did not work unless it remained open. This was a fundamental flaw, as it was impractical to have it open at all times.
Another key concern was the app’s centralised model, which required the government to act as the middleman and to handle all collected personal information. Recognising the potential for mass surveillance or other misuses of data, privacy and security advocates strongly recommended the government take a decentralised approach. This was ignored.
In spite of this, digital rights advocates were successful in pushing the government to incorporate privacy protections into legislation governing the app, including limitations preventing the use of the data for purposes other than public health.
Almost two years after the launch, a report evaluating the app’s effectiveness showed that it did not add much value to the conventional contact tracing system, and in some instances actually increased the workload of contact tracers. The app cost AUD 7.7 million (USD 5.17 million) to develop, and an additional AUD 60,000 to 75,000 (USD 40,000 to 50,000) per month to maintain. As of December 2021, the Australian government refuses to release data on how many people continue to use the app.
In November 2020, a new process to “check-in” to shops and venues using smartphones and QR codes arose. However, the rollout of this system was chaotic. Each state established its own requirements, which varied drastically. In Victoria, for instance, the government initially made it compulsory for businesses to collect their customers’ personal details, but this was not accompanied with guidance or support on how to do so safely. This resulted in many small businesses with little to no technical experience in security rushing to outsource their check-in requirements to third-party registration platforms. The personal information of millions of Australians was put at risk of being collected, used, and sold for purposes completely separate to public health, by a range of third party registration platforms — many of which are owned by companies whose primary business is dealing in data.
Eventually, state governments rolled out their own mechanisms for businesses to register for an official QR code to function with a government-run smartphone application. While this improved the initial problem, it did nothing to resolve the innumerable amount of people who had their details shared in the interim, and now receive spam text messages.
It also does not eliminate concerns regarding government bodies capturing and using data collected by way of the check-in system. On at least six occasions, police have used check-in data for the purpose of law enforcement, a move condemned by the Australian Privacy Commissioner.
In October 2021, the state of South Australia announced a trial of a home quarantine smartphone app. The app was designed to enforce compliance with home quarantine rules through geolocation and facial recognition software. Following the trial, other states around Australia also announced they would be trialling the app.
Technology experts, human rights lawyers, and civil society expressed concern regarding the use of such invasive technologies without strong privacy protections. Digital Rights Watch and Human Rights Law Centre wrote a joint letter to Australian health ministers, urging them to extend the same standard of legislative protections that were put in place for the COVIDSafe App to any other technological response to COVID-19.
Despite calls for assistance from affected communities for increased support, governments prioritised responses that emphasised a punitive, surveillance-based approach. In doing so, Australian governments mistreated the social licence — the informal authority granted to the government by the people based on trust and confidence to see us through a major health crisis — for their own political agenda.
Looking back after two years, it is not clear whether these approaches nor the concessions given on civil liberties were worth it or even effective. Nonetheless, it is clear that Australian governments approached the use of digital technologies from an ideological perspective, heavily leaning on control and surveillance and sidelining a politics of care and support.
It is important that we learn from this experience so that we can use digital technology to respond in a more effective and rights-respecting way in the future. Just as advocates warned at the beginning of 2020, embedding human rights into any technological response to a crisis is essential not only to its success, but also to ensure that we have a society we are glad to be part of once we return to times of relative calm. Australia would do well to heed this lesson.
*Samantha Floreani works at the intersection of human rights, technology, and feminism. She is currently the Program Lead at Digital Rights Watch where she advocates for human rights in the digital age. She was previously a Privacy and Technology Specialist with Salinger Privacy, a Board Member of the Australian Privacy Foundation, and Program Director for Code Like a Girl.