Last I read the UK intends to centrally retain proximity-contact data for 20 years. Rather than deleting when it is decided it's no longer needed to deal with the pandemic.

The UK has also refused to legally commit to not sharing the data with other government departments such as the Home Office (immigration and policing) and DWP (benefits).

So much for data protection and obtaining data for a designated purpose. Whatever happened to the GDPR.

I know enough people that will be inappropriately harmed by this sort of data, whether it is used against them directly or not (it's still a miserable life living in constant fear of "doing something wrong", which now includes "being somewhere you shouldn't be" or "being near someone you shouldn't be"), that I'm firmly against this sort of surveillance state expansion, and firmly in favour of data protection.

As it stands currently I will not install the UK app, and I advise all my friends to steer well clear of it as well.

-

(If they meaningfully improve data protection then I'll change my mind and be all in. E.g. the Google-Apple approach and zero-knowledge methods are enough for me. If epidemiologists and public health would find data useful, let's use some differential privacy. I'm not against data collection done properly in such a way that actually protects people.)