Privacy advocates criticize police in the German city of Mainz for using data from the Luca COVID-19 contact tracing app for an investigation into a man's death
Washington PostRachel Pannett
Context & Ripple Effects
The Luca app asked Germans to check in at restaurants and events on the promise that the data served one purpose only: tracing coronavirus contacts. That bargain is now broken in Mainz, where police pulled check-in records to investigate a man's death, drawing sharp criticism from privacy advocates. The episode extends a pattern dating back to early complaints over pandemic-tracking software, when countries that rushed out contact-tracing tools were already fielding objections over data mining and weak security.
First-order effects
Mainz police now face scrutiny over whether commandeering Luca check-in data for a criminal investigation was legally authorized, and the app's operators face an immediate credibility problem: users and venues have little reason to keep logging in if the records can be seized for unrelated probes.
Second-order effects
German authorities weighing police data powers — including states already reviewing Palantir deployments after a court ruled automated police data analysis unconstitutional — gain a fresh, concrete case for tightening purpose-limitation rules on repurposed civilian systems.
Third-order effects
If the pattern holds across jurisdictions — from Luca in Germany to warrantless Fog Reveal phone searches by local US police — emergency-era surveillance tools will keep migrating into routine law enforcement unless purpose restrictions are enforced structurally, pushing governments toward explicit legal firewalls between public-health and policing data.
The trend: Pandemic-era digital infrastructure built on voluntary participation is being repurposed for law enforcement, forcing courts and legislators to decide whether purpose-limited data collection can survive contact with police demand.
Apparently German police have been abusing the COVID contact tracing app ("Luca") to track people and pursue investigations. https://www.swr.de/... https://twitter.com/...
The German police are using a Covid-19 tracing app to look for crime witnesses, but that additional use risks undermining public confidence in the app, which would undermine its usefulness as a pandemic-fighting tool. https://www.washingtonpost.com/ ... https://twitter.com/...
My colleague @ImogenParker touched on the potential repurposing of vaccine passport infrastructure in a report last summer https://www.adalovelaceinstitute.org/ .... As @carmelatroncoso put it, if you build the road, good luck not driving on it. https://www.washingtonpost.com/ ..…
“Authorities in Germany are under fire for tracking down witnesses to a potential crime by using data from a mobile phone app that was intended to help identify close contacts of people infected with the coronavirus.” https://www.washingtonpost.com/ ...
This apparent misuse of data will feed right into coronavirus-related conspiracy theories, and provide fodder for anti-vax activists' broader anti-government stance https://www.washingtonpost.com/ ...
The police using a covid contact-tracing app as a surveillance tool is 1) exactly what governments and developers said it wouldn't be used for; 2) exactly what most critics said they expected would happen anyway https://twitter.com/...
2020: Officials said data from covid-tracing apps would not be used by police. 2022: A covid-tracing app in Germany was used by police to find witnesses to a potential crime. https://www.washingtonpost.com/ ...