3 ms·

The list of participants to a sport competition has never been considered medical data (the CNIL even mentions that explicitly), even though it correlates with

The list of participants to a sport competition has never been considered medical data (the CNIL even mentions that explicitly), even though it correlates with your medical status: you have not to be handicapped and to be healthy to run a marathon for instance. In our case, the correlation is even thinner: a yes in the database means that you have been EITHER tested OR vaccinated, and a no means that you either haven't answered the invitation or didn't have a health pass. In the end, I guess it would be for a judge to decide if that fits the definition of health data, but I am confident enough to leave it online.

mytailorisrich 5y ago
> The list of participants to a sport competition has never been considered medical data That's obviously quite different here. > a yes in the database means that you have been EITHER tested OR vaccinated Yes, that's extremely specific and that's why I think that's medical data. In any case, my take is that this is complicated for no actual reason. I don't see the problem with the data contained in the 2D DOC QR code: Test result is needed, name and DOB is also needed. These are limited, reasonable data to share. The only thing the database does is to replace test and/or vaccine details by a single flag. In effect the only information removed is indeed whether the person has been tested or vaccinated (unless a test is needed in any case). That seems of little value to me.
lovasoa 5y ago
@mytailorisrich : How is it different from the attendance to a sport event for which you need a medical certificate ? In addition to the added privacy, sanipasse has a very practical advantage: for event organizers, they don't have to scan the passes anymore, and for guests, they can validate their pass ahead of time, at home, instead of waiting in line for someone else to scan their pass at the entry of the event.
- mytailorisrich 5y ago
  Medical certificates for sport events are very French... But the point is that they don't provide any medical data, they just state that the person is fine (in very general terms) performing that activity. For instance if you plan to go diving your GP will ask you a few questions and examine you then in effect write down "Sure, no problem". Here you have a piece of information that very specifically says that persons is negative to Covid or vaccinated. Perhaps its does not say which one it is but my understanding is these are both medical piece of data anyway. That's why I think this is very different. It's like if the only criterion for diving was being HIV negative. If a driving instructor was provided with a medical certificate that said "Sure, no problem" in that case it would be the same as getting the HIV test status of that person. In that respect, the advantage of scanning the QR code is that there is no need to store sensitive data anywhere but within the QR code itself, which remains under the control of the individual. I think this is actually one consideration for deciding to implement the system that way.
  - lovasoa 5y ago
    > they don't provide any medical data, they just state that the person is fine performing that activity It's the same with the "validated" boolean information. It does not provide more medical data, it just validates the absence of risk of you participating. Not having HIV is obviously not required to go scuba diving because it is completely unrelated. But for shooting in certain kinds of movies for instance, you do need to test negative to HIV. And the list of actors in the movie is not considered "medical data".

mytailorisrich 5y ago

> The list of participants to a sport competition has never been considered medical data That's obviously quite different here. > a yes in the database means that you have been EITHER tested OR vaccinated Yes, that's extremely specific and that's why I think that's medical data. In any case, my take is that this is complicated for no actual reason. I don't see the problem with the data contained in the 2D DOC QR code: Test result is needed, name and DOB is also needed. These are limited, reasonable data to share. The only thing the database does is to replace test and/or vaccine details by a single flag. In effect the only information removed is indeed whether the person has been tested or vaccinated (unless a test is needed in any case). That seems of little value to me.

lovasoa 5y ago

@mytailorisrich : How is it different from the attendance to a sport event for which you need a medical certificate ? In addition to the added privacy, sanipasse has a very practical advantage: for event organizers, they don't have to scan the passes anymore, and for guests, they can validate their pass ahead of time, at home, instead of waiting in line for someone else to scan their pass at the entry of the event.

mytailorisrich 5y ago
Medical certificates for sport events are very French... But the point is that they don't provide any medical data, they just state that the person is fine (in very general terms) performing that activity. For instance if you plan to go diving your GP will ask you a few questions and examine you then in effect write down "Sure, no problem". Here you have a piece of information that very specifically says that persons is negative to Covid or vaccinated. Perhaps its does not say which one it is but my understanding is these are both medical piece of data anyway. That's why I think this is very different. It's like if the only criterion for diving was being HIV negative. If a driving instructor was provided with a medical certificate that said "Sure, no problem" in that case it would be the same as getting the HIV test status of that person. In that respect, the advantage of scanning the QR code is that there is no need to store sensitive data anywhere but within the QR code itself, which remains under the control of the individual. I think this is actually one consideration for deciding to implement the system that way.
- lovasoa 5y ago
  > they don't provide any medical data, they just state that the person is fine performing that activity It's the same with the "validated" boolean information. It does not provide more medical data, it just validates the absence of risk of you participating. Not having HIV is obviously not required to go scuba diving because it is completely unrelated. But for shooting in certain kinds of movies for instance, you do need to test negative to HIV. And the list of actors in the movie is not considered "medical data".