Potential Privacy Violation on Manual Contact Tracing: A Rwanda Case Study

Erick Semindu; Nadia Lorraine Niyonsaba; Eric Ishimwe; Anny Carella Irumva; Gladys Inabeza; Elie Niringiyimana; Patrick Mazimpaka; Trevor Henry Chiboora

doi:10.1109/AFRICON55910.2023.10293740

Potential Privacy Violation on Manual Contact Tracing: A Rwanda Case Study

Erick Semindu, Nadia Lorraine Niyonsaba, Eric Ishimwe, Anny Carella Irumva, Gladys Inabeza, Elie Niringiyimana, Patrick Mazimpaka, Trevor Henry Chiboora

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

Abstract

A vast amount of personal information is available on the internet, making it easy to extract a significant amount of information from a single piece of data. This study examines the potential risk of privacy violations in the manual collection of personal data during the COVID-19 pandemic in Rwanda. The research involved eight security firms to assess their data collection and disposal practices. The findings reveal a potential danger of privacy breaches due to employee ignorance and the lack of an internal policy on data handling. Moreover, storing personal data on cloud platforms not hosted in Rwanda violates Rwandan Data Protection Law. The study recommends large-scale research and government support to improve data protection practices, providing employee training, developing internal policies, securing data storage, regular data disposal, and promoting citizen awareness of data protection laws and privacy violations.

Original language	English
Title of host publication	2023 IEEE AFRICON
Subtitle of host publication	Proceedings of the 16th IEEE AFRICON
Place of Publication	Piscataway, NJ
Publisher	IEEE
Number of pages	4
ISBN (Electronic)	979-8-3503-3621-4
ISBN (Print)	979-8-3503-3622-1
DOIs	https://doi.org/10.1109/AFRICON55910.2023.10293740
Publication status	Published - 31 Oct 2023
Externally published	Yes
Event	2023 IEEE AFRICON - Nairobi, Kenya Duration: 20 Sept 2023 → 22 Sept 2023

Publication series

Name	IEEE AFRICON Conference
Publisher	IEEE
Volume	2023
ISSN (Print)	2153-0025
ISSN (Electronic)	2153-0033

Conference

Conference	2023 IEEE AFRICON
Country/Territory	Kenya
City	Nairobi
Period	20/09/23 → 22/09/23

Keywords

n/a OA procedure
Contact tracing
COVID-19
Personal data
Privacy
Consent

UN SDGs

This output contributes to the following UN Sustainable Development Goals (SDGs)

Access to Document

10.1109/AFRICON55910.2023.10293740

Cite this

@inproceedings{93acad20276f4a1dad5bbb80bce18d4c,

title = "Potential Privacy Violation on Manual Contact Tracing: A Rwanda Case Study",

abstract = "A vast amount of personal information is available on the internet, making it easy to extract a significant amount of information from a single piece of data. This study examines the potential risk of privacy violations in the manual collection of personal data during the COVID-19 pandemic in Rwanda. The research involved eight security firms to assess their data collection and disposal practices. The findings reveal a potential danger of privacy breaches due to employee ignorance and the lack of an internal policy on data handling. Moreover, storing personal data on cloud platforms not hosted in Rwanda violates Rwandan Data Protection Law. The study recommends large-scale research and government support to improve data protection practices, providing employee training, developing internal policies, securing data storage, regular data disposal, and promoting citizen awareness of data protection laws and privacy violations.",

keywords = "n/a OA procedure, Contact tracing, COVID-19, Personal data, Privacy, Consent",

author = "Erick Semindu and Niyonsaba, {Nadia Lorraine} and Eric Ishimwe and Irumva, {Anny Carella} and Gladys Inabeza and Elie Niringiyimana and Patrick Mazimpaka and Chiboora, {Trevor Henry}",

note = "Publisher Copyright: {\textcopyright} 2023 IEEE.; 2023 IEEE AFRICON ; Conference date: 20-09-2023 Through 22-09-2023",

year = "2023",

month = oct,

day = "31",

doi = "10.1109/AFRICON55910.2023.10293740",

language = "English",

isbn = "979-8-3503-3622-1",

series = "IEEE AFRICON Conference",

publisher = "IEEE",

booktitle = "2023 IEEE AFRICON",

address = "United States",

}

Semindu, E, Niyonsaba, NL, Ishimwe, E, Irumva, AC, Inabeza, G, Niringiyimana, E, Mazimpaka, P & Chiboora, TH 2023, Potential Privacy Violation on Manual Contact Tracing: A Rwanda Case Study. in 2023 IEEE AFRICON: Proceedings of the 16th IEEE AFRICON. IEEE AFRICON Conference, vol. 2023, IEEE, Piscataway, NJ, 2023 IEEE AFRICON, Nairobi, Kenya, 20/09/23. https://doi.org/10.1109/AFRICON55910.2023.10293740

Potential Privacy Violation on Manual Contact Tracing: A Rwanda Case Study. / Semindu, Erick; Niyonsaba, Nadia Lorraine; Ishimwe, Eric et al.
2023 IEEE AFRICON: Proceedings of the 16th IEEE AFRICON. Piscataway, NJ: IEEE, 2023. (IEEE AFRICON Conference; Vol. 2023).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - Potential Privacy Violation on Manual Contact Tracing

T2 - 2023 IEEE AFRICON

AU - Semindu, Erick

AU - Niyonsaba, Nadia Lorraine

AU - Ishimwe, Eric

AU - Irumva, Anny Carella

AU - Inabeza, Gladys

AU - Niringiyimana, Elie

AU - Mazimpaka, Patrick

AU - Chiboora, Trevor Henry

PY - 2023/10/31

Y1 - 2023/10/31

N2 - A vast amount of personal information is available on the internet, making it easy to extract a significant amount of information from a single piece of data. This study examines the potential risk of privacy violations in the manual collection of personal data during the COVID-19 pandemic in Rwanda. The research involved eight security firms to assess their data collection and disposal practices. The findings reveal a potential danger of privacy breaches due to employee ignorance and the lack of an internal policy on data handling. Moreover, storing personal data on cloud platforms not hosted in Rwanda violates Rwandan Data Protection Law. The study recommends large-scale research and government support to improve data protection practices, providing employee training, developing internal policies, securing data storage, regular data disposal, and promoting citizen awareness of data protection laws and privacy violations.

AB - A vast amount of personal information is available on the internet, making it easy to extract a significant amount of information from a single piece of data. This study examines the potential risk of privacy violations in the manual collection of personal data during the COVID-19 pandemic in Rwanda. The research involved eight security firms to assess their data collection and disposal practices. The findings reveal a potential danger of privacy breaches due to employee ignorance and the lack of an internal policy on data handling. Moreover, storing personal data on cloud platforms not hosted in Rwanda violates Rwandan Data Protection Law. The study recommends large-scale research and government support to improve data protection practices, providing employee training, developing internal policies, securing data storage, regular data disposal, and promoting citizen awareness of data protection laws and privacy violations.

KW - n/a OA procedure

KW - Contact tracing

KW - COVID-19

KW - Personal data

KW - Privacy

KW - Consent

UR - http://www.scopus.com/inward/record.url?scp=85177679723&partnerID=8YFLogxK

U2 - 10.1109/AFRICON55910.2023.10293740

DO - 10.1109/AFRICON55910.2023.10293740

M3 - Conference contribution

AN - SCOPUS:85177679723

SN - 979-8-3503-3622-1

T3 - IEEE AFRICON Conference

BT - 2023 IEEE AFRICON

PB - IEEE

CY - Piscataway, NJ

Y2 - 20 September 2023 through 22 September 2023

ER -

Potential Privacy Violation on Manual Contact Tracing: A Rwanda Case Study

Abstract

Publication series

Conference

Keywords

UN SDGs

Access to Document

Other files and links

Fingerprint

Cite this