French Security Researchers Warn of Surveillance Risks in Contact Tracing Apps
Hundreds of French cryptography experts urge parliament to mandate privacy safeguards before approving the StopCovid contact-tracing app. The letter highlights significant surveillance vulnerabilities in both centralized and decentralized tracking protocols.
Nearly 500 French cryptography and security researchers sign a letter warning about major privacy risks associated with contact-tracing applications. This massive intervention comes just before a French parliamentary debate on post-lockdown measures, which includes a discussion of the government-backed StopCovid app. Notably, 77 signatories are affiliated with Inria, the very research institute that designs the ROBERT protocol set to power the app, revealing a deep internal conflict over the technology.
The researchers argue that these applications create severe risks for individual rights by potentially allowing the state or operating system makers to reconstruct a user's entire social graph. Their thorough analysis undermines both centralized protocols like ROBERT and decentralized alternatives like DP-3T by outlining multiple realistic attack scenarios. They emphasize that any digital health solution requires solid evidence of medical benefit to justify the serious privacy risks involved.
In addition to highlighting technical vulnerabilities, the letter demands complete transparency regarding every technical choice made for the app. The experts insist that data collection remains strictly minimized and that citizens clearly understand the risks while retaining the freedom to opt out. Their unified stance reflects a broader European pushback as various countries rush to implement digital contact tracing during the pandemic.