Skip to main content
NCBI home page
Wiley - PMC COVID-19 Collection logoLink to Wiley - PMC COVID-19 Collection
. 2022 Jun 7;161(2):353–375. [Article in French] doi: 10.1111/ilrf.12245

Une mesure proportionnée face à la menace du COVID‐19? Le recours aux applications et autres outils de surveillance des salariés au regard des règles relatives à la protection des données de l'Union européenne

Seili SUDER 1,✉, Andra SIIBAK 2
PMCID: PMC9348362

Résumé

Les autrices s'intéressent aux outils de suivi des contacts et autres dispositifs de surveillance utilisés par les employeurs pendant la pandémie. Elles se demandent s'ils sont bien compatibles avec les dispositions du Règlement général sur la protection des données de l'Union européenne. Rappelant que la relation de travail est par nature déséquilibrée, elles estiment que les législations nationales devraient mieux protéger le droit des salariés de refuser ces systèmes une fois la pandémie passée. En outre, quand la sécurité des travailleurs ne dépendra plus de ces outils, il faudra compléter les règles et orientations existantes pour éviter l'utilisation des informations collectées à mauvais escient.

Mots‐clés: technologies de suivi des contacts, surveillance des salariés, protection des données, RGPD, COVID‐19

 

Les articles paraissant dans la Revue internationale du Travail n'engagent que leurs auteurs, et leur publication ne signifie pas que le BIT souscrit aux opinions qui y sont exprimées.

Titre original: «Proportionate Response to the COVID‐19 Threat? Use of Apps and Other Technologies for Monitoring Employees under the European Union's Data Protection Framework» (International Labour Review, vol. 161, no 2). Traduit par la rédaction. Également disponible en espagnol (Revista Internacional del Trabajo, vol. 141, no 2).

Contributor Information

Seili SUDER, Email: seili.suder@sm.ee.

Andra SIIBAK, Email: andra.siibak@ut.ee.

Références

  1. Adams, Ben . 2020. «PRA Health Sciences Unveils COVID-19 Monitoring App to Track Symptoms», Fierce Biotech, 25 mars 2020. https://www.fiercebiotech.com/cro/pra-health-sciences-unveils-covid-19-monitoring-app-to-track-symptoms.
  2. Agencia Española de Protección de Datos . 2020. «Report from the State Legal Service (Detached Department of the SLS at the Spanish DPA) on Processing Activities Relating to the Obligation for Controllers from Private Companies and Public Administrations to Report on Workers Suffering from COVID-19», Ref. 0017/2020. Madrid.
  3. Ahmed, Nadeem , Michelin Regio A., Wanli Xue, Sushmita Ruj, Malaney Robert, Kanhere Salil S., Seneviratne Aruna et al. 2020. «A Survey of COVID-19 Contact Tracing Apps», IEEE Access, 8: 134577–134601. [Google Scholar]
  4. Alsdurf, Hannah , Belliveau Edmond, Bengio Yoshua, Deleu Tristan, Gupta Prateek, Ippolito Daphne, Janda Richard et al. 2020. «COVI White Paper», version 1.1, 27 juillet 2020. 10.48550/arXiv.2005.08502. [DOI]
  5. Autorité de protection des données . 2020. «COVID-19 sur le lieu de travail», septembre 2020. https://www.autoriteprotectiondonnees.be/professionnel/themes/covid-19/covid-19-sur-le-lieu-de-travail.
  6. Azad, Muhammad Ajmal , Arshad Junaid, Akmal Syed Muhammad Ali, Riaz Farhan, Abdullah Sidrah, Imran Muhammad et Ahmad Farhan. 2021. «A First Look at Privacy Analysis of COVID-19 Contact Tracing Mobile Applications», IEEE Internet of Things Journal, 8 (21): 15796–15806. [DOI] [PMC free article] [PubMed] [Google Scholar]
  7. Belli, Luca , Schwartz Molly et Louzada Luiza. 2017. «Selling Your Soul while Negotiating the Conditions: From Notice and Consent to Data Control by Design», Health and Technology, 7 (4): 453–467. [Google Scholar]
  8. BIT . 2020. «Observatoire de l'OIT: le COVID-19 et le monde du travail», sixième édition, 23 septembre 2020. Genève.
  9. Bittle, Jake . 2020. «Your Boss Wants to Know whether You Washed Your Hands», Slate, 5 mai 2020. https://slate.com/technology/2020/05/rfid-technology-handwashing-social-distancing-coronavirus-workplace.html.
  10. Bodie, Matthew T. , et McMahon Michael. 2021. «Employee Testing, Tracing, and Disclosure as a Response to the Coronavirus Pandemic», Washington University Journal of Law & Policy, 64 (1): 31–61. [Google Scholar]
  11. Bradford, Laura , Aboy Mateo et Liddell Kathleen. 2020. «COVID-19 Contact Tracing Apps: A Stress Test for Privacy, the GDPR, and Data Protection Regimes», Journal of Law and the Biosciences, 7 (1). 10.1093/jlb/lsaa034. [DOI] [PMC free article] [PubMed] [Google Scholar]
  12. Braithwaite, Jeffrey , Ludlow Kristiana, Testa Luke, Herkes Jessica, Augustsson Hanna, Lamprell Gina, McPherson Elise et Zurynski Yvonne. 2020. «Built to Last? The Sustainability of Healthcare System Improvements, Programmes and Interventions: A Systematic Integrative Review», BMJ Open, 10 (6). 10.1136/bmjopen-2019-036453. [DOI] [PMC free article] [PubMed] [Google Scholar]
  13. Brown, Stephen R. , Linden Michael F., Sullivan Emma J. et Torres Joseph J.. 2020. «May an Employer Require Its Employees to Use a Contact Tracing App?», Jenner&Block COVID-19 Coronavius Resources, 24 avril 2020. https://jenner.com/system/assets/publications/19870/original/May%20an%20Employer%20Require%20Its%20Employees%20to%20Use%20a%20Contact%20Tracing%20App.pdf?158801012.
  14. CDC (Centers for Disease Control and Prevention) . 2020. «Preliminary Criteria for the Evaluation of Digital Contact Tracing Tools for COVID-19», 3 mai 2020. https://www.cdc.gov/coronavirus/2019-ncov/downloads/php/prelim-eval-criteria-digital-contact-tracing.pdf.
  15. Cellan-Jones, Rory . 2020. «Police Told Not to Download NHS Covid-19 App», BBC News, 28 septembre 2020. https://www.bbc.com/news/technology-54328644.
  16. CEPD (Contrôleur européen de la protection des données) . 2020. «Orientations du CEPD. Réactions des institutions de l'UE, en tant qu'employeurs, à la crise de la COVID-19», 15 juillet 2020. Bruxelles.
  17. Chen, Yuanfang , Crespi Noel, Ortiz Antonio M. et Lei Shu. 2017. «Reality Mining: A Prediction Algorithm for Disease Dynamics Based on Mobile Big Data», Information Sciences, 379 (février): 82–93. [Google Scholar]
  18. Chesler, Caren . 2020. «Coronavirus Will Turn Your Office into a Surveillance State», Wired, 4 mai 2020. https://www.wired.co.uk/article/coronavirus-work-oifice-surveillance.
  19. Clements, Laura . 2020. «Transport for Wales Is Telling Staff to Turn Off the NHS’ Contact Tracing App», Wales Online, 15 décembre 2020. https://www.walesonline.co.uk/news/wales-news/transport-for-wales-coronavirus-staff-19453360.
  20. Commission européenne . 2011. «Special Eurobarometer 359: Attitudes on Data Protection and Electronic Identity in the European Union», Wave 74.3 (rapport). Bruxelles: TNS Opinion & Social.
  21. Commission européenne . 2020a. «Mobile Applications to Support Contact Tracing in the EU's Fight against COVID-19», rapport d'activité, juin 2020. Bruxelles.
  22. Commission européenne . 2020b. «Communication de la Commission: orientations sur les applications soutenant la lutte contre la pandémie de COVID 19 en ce qui concerne la protection des données - 2020/C 124 I/01», Journal officiel de l'Union européenne, C 124 I: 1–9. [Google Scholar]
  23. Dave, Paresh . 2020. «Companies Bet on AI Cameras to Track Social Distancing, Limit Liability», Reuters, 27 avril 2020. https://www.reuters.com/article/us-health-coronavirus-surveillance-tech-idINKCN22914R.
  24. Davis, Jessica . 2021. «PA Health Dept Sued; Investigation Looms, after Contact Tracing Breach», Health IT Security, 10 mai 2021. https://healthitsecurity.com/news/pa-health-dept-sued-investigation-looms-after-contact-tracing-breach.
  25. DSB (Datenschutz behörde) . 2022. «Information der Datenschutzbehörde zum Coronavirus (Covid-19)» [informations de l'Autorité de protection des données sur le coronavirus (COVID-19)], avril 2022. https://www.dsb.gv.at/download-links/informationen-zum-coronavirus-covid-19-.html.
  26. DSK (Datenschutzkonferenz) . 2020. «Datenschutzrechtliche Informationen zur Verarbeitung von personenbezogenen Daten durch Arbeitgeber und Dienstherren im Zusammenhang mit der Corona-Pandemie» [Communiqué de presse - Document d'information conjoint des organismes allemands pour le contrôle de la protection des données sur la protection des données dans le contexte de la pandémie de coronavirus], 13 mars 2020. https://www.datenschutzkonferenz-online.de/media/pm/20200325_Informationen_zu_Corona_und_Arbeitgeber.pdf.
  27. Eckel, Erik . 2021. «How the Oura Ring Health-Monitoring Wearable May Help Make Returning to the Office Safer», TechRepublic, 9 avril 2021. https://www.techrepublic.com/article/how-the-oura-ring-may-help-make-returning-to-the-office-safer/.
  28. EDPB (Comité européen de la protection des données) . 2020a. Lignes directrices 4/2020 relatives à l'utilisation de données de localisation et d'outils de recherche de contacts dans le cadre de la pandémie de COVID-19. Bruxelles.
  29. EDPB (Comité européen de la protection des données) . 2020b. Guidelines 07/2020 on the Concepts of Controller and Processor in the GDPR, version 1.0. Bruxelles.
  30. EDPB (Comité européen de la protection des données) . 2020c. «Statement of the EDPB Chair on the Processing of Personal Data in the Context of the COVID-19 Outbreak», 16 mars 2020. Bruxelles.
  31. EDPB (Comité européen de la protection des données) . 2020d. «Déclaration sur le traitement des données à caractère personnel dans le contexte de l’épidémie de COVID-19», 19 mars 2020. Bruxelles.
  32. Etherington, Darrell . 2020. «Estimote Launches Wearables for Workplace-Level Contact Tracing for COVID-19», TechCrunch, 2 avril 2020. https://techcrunch.com/2020/04/02/estimote-launches-wearables-for-workplace-level-contact-tracing-for-covid-19/?guccounter=1.
  33. Gasser, Urs , Ienca Marcello, Scheibner James, Sleigh Joanna et Vayena Effy. 2020. «Digital Tools against COVID-19: Framing the Ethical Challenges and How to Address Them», manuscrit soumis pour publication (21 avril). https://arxiv.org/abs/2004.10236. [DOI] [PMC free article] [PubMed]
  34. Gauttier, Stéphanie . 2019. «I've Got You under My Skin: The Role of Ethical Consideration in the (Non-)Acceptance of Insideables in the Workplace», Technology in Society, 56 (février): 93–108. [Google Scholar]
  35. Ghoshal, Somak . 2020. «Open Book? In India, Where People Are Forced to Download a Tracking App to Get Paid, Journalists Are Worried about It Also Being Used to Access Their Contacts», Index on Censorship, 49 (2): 53–55. [Google Scholar]
  36. Groupe de travail «article 29» sur la protection des données . 2017a. Avis 2/2017 sur le traitement des données sur le lieu de travail, document WP249. Bruxelles: Commission européenne.
  37. Groupe de travail «article 29» sur la protection des données . 2017b. Lignes directrices concernant l'analyse d'impact relative à la protection des données (AIPD) et la manière de déterminer si le traitement est «susceptible d'engendrer un risque élevé» aux fins du règlement (UE) 2016/679, document WP 248 rév.01. Bruxelles: Commission européenne.
  38. Guinchard, Audrey . 2021. «Our Digital Footprint under Covid-19: Should We Fear the UK Digital Contact Tracing App?», International Review of Law, Computers & Technology, 35 (1): 84–97. [Google Scholar]
  39. Haskins, Caroline . 2020. «Workers Around the World Are Already Being Monitored by Digital Contact Tracing Apps», BuzzFeed News, 30 mai 2020. https://www.buzzfeednews.com/article/carolinehaskins1/coronavirus-private-contact-tracing.
  40. Johnson, Erica . 2021. «School Custodian Refuses to Download Phone App that Monitors Location, Says It Got Her Fired», CBC News, 12 avril 2021. https://www.cbc.ca/news/gopublic/tattleware-privacy-employment-1.5978337.
  41. Kędzior, Magdalena . 2021. «The Right to Data Protection and the COVID-19 Pandemic: The European Approach», ERA Forum, 21 (4): 533–543. [Google Scholar]
  42. Klar, Renate , et Lanzerath Dirk. 2020. «The Ethics of COVID-19 Tracking Apps: Challenges and Voluntariness», Research Ethics, 16 (3-4): 1–9. 10.1177/1747016120943622. [DOI] [Google Scholar]
  43. KMWorld . 2020. «Pegasystems Creates Free App to Track COVID-19 Employee Exposure», 24 mars 2020. https://www.kmworld.com/Articles/ReadArticle.aspx?ArticleID=139909.
  44. Kretzschmar, Mirjam E. , Rozhnova Ganna, Bootsma Martin C. J., van Boven Michiel, van de Wijgert Janneke H. H. M. et Bonten Marc J.M.. 2020. «Impact of Delays on Effectiveness of Contact Tracing Strategies for COVID-19: A Modelling Study», The Lancet Public Health, 5 (8): E452–E459. [DOI] [PMC free article] [PubMed] [Google Scholar]
  45. Leswing, Kif . 2020. «As Workplaces Slowly Reopen, Tech Companies Smell a New Multibillion-Dollar Opportunity: Helping Businesses Trace Coronavirus», CNBC, 10 mai 2020. https://www.cnbc.com/2020/05/10/coronavirus-tracing-for-workplaces-could-become-new-tech-opportunity.html.
  46. Luciano, Floridi . 2020. «Mind the App: Considerations on the Ethical Risks of COVID-19 Apps», Philosophy & Technology, 33 (2): 167–172. [DOI] [PMC free article] [PubMed] [Google Scholar]
  47. Maddocks . 2020. «Department of Health: The COVIDSafe Application - Privacy Impact Assessment», 24 avril 2020. Barton, Australia.
  48. Mangan, David . 2018. «Online Speech and the Workplace: Public Right, Private Regulation», Comparative Labor Law and Policy Journal, 39 (2): 357–388. [Google Scholar]
  49. McLachlan, Scott , Lucas Peter J., Dube Kudakwashe, Hitman Graham A., Osman Magda, Kyrimi Evangelia, Neil Martin et Fenton Norman E.. 2020. «The Fundamental Limitations of COVID-19 Contact Tracing Methods and How to Resolve Them with a Bayesian Network Approach», manuscrit accepté pour publication (mai). 10.13140/RG.2.2.27042.66243. [DOI]
  50. Mitrou, Lilian . 2018. «Data Protection, Artificial Intelligence and Cognitive Services: Is the General Data Protection Regulation (GDPR) “Artificial Intelligence-Proof”?», manuscrit non publié, disponible en ligne (31 décembre). 10.2139/ssrn.3386914. [DOI]
  51. Nemzeti Adatvédelmi és Információszabadság Hatóság . 2020. «Information on Processing Data Related to the Coronavirus Epidemic», NAIH/2020/2586. Budapest.
  52. Newlands, Gemma , Lutz Christoph, Tamò-Larrieux Aurelia, Villaronga Eduard Fosch, Harasgama Rehana et Scheitlin Gil. 2020. «Innovation under Pressure: Implications for Data Privacy during the Covid-19 Pandemic», Big Data & Society, 7 (2). 10.1177/2053951720976680. [DOI] [Google Scholar]
  53. OMS (Organisation mondiale de la santé) . 2020. «Recherche des contacts dans le cadre de la COVID-19: orientations provisoires», 10 mai 2020. Genève.
  54. Oswald, Marion , et Grace Jamie. 2021. «The COVID-19 Contact Tracing App in England and “Experimental Proportionality”», Public Law, no 1, 27–37. [Google Scholar]
  55. Padi, Joel . 2018. «Big Data Analytics, Consent and the European Union (EU) General Data Protection Regulation 2016 (GDPR): The Fallacy of Consent and Control», mémoire de diplôme, Université de Keele.
  56. Perscheid, Cindy , Benzler Justus, Hermann Claus, Janke Michael, Moyer David, Laedtke Todd, Adeoye Olawunmi et al. 2018. «Ebola Outbreak Containment: Real-Time Task and Resource Coordination with SORMAS», Frontiers in ICT, 5 (7). 10.3389/fict.2018.00007. [DOI] [Google Scholar]
  57. Ponce Del Castillo, Aída . 2020. «Les applications de traçage des contacts pour le COVID-19: comment éviter que la vie privée ne devienne la prochaine victime», ETUI Policy Brief, no 5/2020. Bruxelles: Institut syndical européen.
  58. Poullet, Yves . 2009. «Data Protection Legislation: What Is at Stake for Our Society and Democracy?», Computer Law & Security Review, 25 (3): 211–226. [Google Scholar]
  59. Ravindranath, Mohana . 2020. «Coronavirus Opens Door to Company Surveillance of Workers», Político, 26 juin 2020. https://www.politico.com/news/2020/06/26/workplace-apps-tracking-coronavirus-could-test-privacy-boundaries-340525.
  60. Reuters . 2021. «As Employees Return to the Office, Banks Explore Surveillance Tech», VentureBeat, 21 mai 2021. https://venturebeat.com/2021/05/21/banks-explore-sensors-cameras-monitoring-tech-as-workers-return-to-office/.
  61. Scassa, Teresa . 2021. «COVID-19 Contact Tracing: From Local to Global and Back Again», International Journal of E-Planning Research, 10 (2): 45–58. [Google Scholar]
  62. Scroxton, Alex . 2020. «GDPR Wholly Inappropriate to Govern Contact-Tracing Data», ComputerWeekly, 19 mai 2020. https://www.computerweekly.com/news/252483355/GDPR-wholly-inappropriate-to-govern-contact-tracing-data.
  63. Shemer, Simona . 2021. «Could a New Israeli App Help Tackle COVID-19 Tracing in the Workplace?», NoCamels, 24 janvier 2021. https://nocamels.com/2021/01/contacttracing-app-workplace-covid/.
  64. Solove, Daniel J. 2013. «Introduction: Privacy Self-Management and the Consent Dilemma», Harvard Law Review, 126 (7): 1880–1903. [Google Scholar]
  65. Spears, Janine L. , et Ali Padyab. À paraître. «Privacy Risk in Contact Tracing Systems», Behaviour & Information Technology. 10.1080/0144929X.2021.1901990. [DOI]
  66. Suder, Seili . 2021. «Processing Employees’ Personal Data during the Covid-19 Pandemic», European Labour Law Journal, 12 (3): 322–337. [Google Scholar]
  67. Suder, Seili , et Siibak Andra. 2017. «Employers as Nightmare Readers: An Analysis of Ethical and Legal Concerns Regarding Employer-Employee Practices on SNS», Baltic Journal of Law & Politics, 10 (2): 76–106. [Google Scholar]
  68. Towers-Clark, Charles . 2020. «Is Contact Tracing a Public or Private Concern?», Forbes, 17 juin 2020. https://www.forbes.com/sites/charlestowersclark/2020/06/17/is-contact-tracing-a-public-or-private-concern/.
  69. UK Health Security Agency . 2020. «Guidance: Maintaining Records of Staff, Customers and Visitors to Support NHS Test and Trace» [ces directives ont été retirées le 24 février 2022]. https://www.gov.uk/guidance/maintaining-records-of-staff-customers-and-visitors-to-support-nhs-test-and-trace.
  70. van den Hoven, Jeroen , et Weckert John (dir.). 2008. Information Technology and Moral Philosophy. New York: Cambridge University Press. [Google Scholar]
  71. van Kolfschooten, Hannah , et de Ruijter Anniek. 2020. «COVID-19 and Privacy in the European Union: A Legal Perspective on Contact Tracing», Contemporary Security Policy, 41 (3): 478–491. [Google Scholar]
  72. Vitak, Jessica , et Zimmer Michael. 2020. «More than Just Privacy: Using Contextual Integrity to Evaluate the Long-Term Risks from COVID-19 Surveillance Technologies», Social Media + Society, 6 (3). 10.1177/2056305120948250. [DOI] [PMC free article] [PubMed] [Google Scholar]
  73. Watkins, Kevin . 2021. «Security and Privacy of COVID-19 Contact-Tracing Apps», Symantec Enterprise Blogs/Threat Intelligence, 12 mars 2021. https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/security-privacy-covid-tracing-apps.
  74. Watts, David . 2020. «COVIDSafe, Australia's Digital Contact Tracing App: The Legal Issues» (2 mai 2020), manuscrit non publié, disponible en ligne (2 mai). 10.2139/ssrn.3591622. [DOI]
  75. Webber, Ashleigh . 2020. «Teachers Told to Disable NHS Contact-Tracing App, Claims Union», Personnel Today, 17 novembre 2020. https://www.personneltoday.com/hr/teachers-told-to-disable-nhs-contact-tracing-app-claims-union/.
  76. White House et CDC . 2020. Guidelines: Opening Up America Again. Washington. https://trumpwhitehouse.archives.gov/wp-content/uploads/2020/04/Guidelines-for-Opening-Up-America-Again.pdf.
  77. Xia, Yang . 2021. «Workforce Survival: Tracking Potential COVID-19 Exposure amid Socioeconomic Activities Using Automatic Log-Keeping Apps», Population Health Management, 24 (2): 156–157. [DOI] [PMC free article] [PubMed] [Google Scholar]
  78. Yasaka, Tyler M. , Lehrich Brandon M. et Sahyouni Ronald. 2020. «Peer-to-Peer Contact Tracing: Development of a Privacy-Preserving Smartphone App», JMIR mHealth and uHealth, 8 (4). 10.2196/18936. [DOI] [PMC free article] [PubMed] [Google Scholar]

Articles from Revue internationale du Travail are provided here courtesy of Wiley

RESOURCES