TraceTogether

Technology The app utilises a custom protocol, BlueTrace, which allows for a distributed approach whereby participating devices exchange proximity information whenever an app detects another device with the TraceTogether app installed. The protocol, and reference app implementations of it, were also open sourced as BlueTrace and OpenTrace respectively. Initial versions of the app required users to register using only their mobile number, since 7 April 2020, it requires users' NRIC or passport numbers, and added support for SafeEntry. The website states that the NRIC number was required in order to allow MOH to reach the right person when they need to give important health advice on COVID-19, and was stored in a secure server, never accessed unless needed for contact tracing, and never shared with other app users. The main goal of SafeEntry helps COVID-19 cases remember the places that they've visited. This helps MOH to identify potential infection clusters and perform cluster COVID-19 testing. Following installation, the user is requested to grant relevant permissions such as Bluetooth. Android users are additionally required to grant Location permission as Bluetooth can be used to derive location information when combined with beacons in fixed locations. To trace users the Ministry of Health (MOH) issues time sensitive anonymous temporary IDs that are used to identify the patient to all third parties. When two users of the app pass by, it uses the Bluetooth Relative Signal Strength Indicator (RSSI) readings between devices across time to approximate the proximity and duration of an encounter between two users. This proximity and duration information is stored on one's phone for 25 days on a rolling basis. The usage of the app had been limited by the technical limitations of needing to have the application to run in the foreground on iOS devices, and battery drain, but these problems had been reportedly addressed in the 2.1 version of the app released on 3 July 2020, and version 2.1.3 of 5 Aug added informational, work pass and SafeEntry QR features. Release timeline The app was released on 20 March 2020, following 8 weeks of development by Singapore's Government Technology Agency in collaboration with Ministry of Health (MOH). On 10 April 2020, following the lifting of the embargo on the Google-Apple Exposure Notification (GAEN) system, the developers announced that they had been working with Apple and Google on specifications which would allow for cross-border inter-operability, and had begun to incorporate these new APIs into TraceTogether. The developers envisaged this as a way to overcome the app's inability to access full background Bluetooth scanning functionality on iOS devices (which led to the app being active only when it ran in the foreground), and increase the pool of interoperable devices, both of which could have increased the contact tracing utility. He subsequently explained that the Government had decided against using the Google-Apple Exposure Notification (GAEN) system, citing its inability to "identify how, when and whom the person was infected by or passed the infection to" and "the 'graph' not being available to the contact tracers". Instead, a new portable, wearable device, called the TraceTogether Token would be issued to all 5.7 million residents in order to increase the pool of participants. On 7 December 2020, market research firm Gartner crowned TraceTogether as the Asia-Pacific winner for its 2020 Government Eye on Innovation award, after the firm had conducted a poll among various government organisations around the world. With the discontinuation of the system, the app has been removed from all official mobile app stores. Uptake During the release of the app, Minister for National Development Lawrence Wong, a co-chair of the multi-ministry Covid task force, explained that for TraceTogether to be effective, at least three-quarters – if not everyone – of the population had to install it, and had to turn on their Bluetooth function to ensure the app was running. This percentage increased to 17% of the population in May 2020. On 5 June 2020, the Minister-in-charge of the Smart Nation Initiative announced in Parliament that the TraceTogether has been downloaded on a voluntary basis by 1.5 million users, which worked out to only 25 per cent of the population. As of 14 December 2020, following the release of the token, adoption rate of the app and token combined exceeded 60% of Singapore's resident population. Despite falling short of the 70% adoption target that the Government had set loosen restrictions, On 23 December 2020, Balakrishnan revealed that the adoption rate had exceeded 70%. On 11 May 2021, Balakrishnan revealed that the adoption rate had exceeded 92%, with 4,923,054 individuals aged above six. There were about 3,000 users, or 0.056% of the registered users, who deregistered for reasons such as expats leaving the country, people who have died, or people opting out over data security reasons. the contact tracing teams has improved their efficiency by reducing the time taken to identify and quarantine a close contact from four days to less than two days. the percentage may be low due to Singapore mandating mask-wearing since 14 April 2020. It was reported on 22 April 2021 that TraceTogether system had identified at least 75 persons who had to be placed under quarantine, but would likely not have been picked up through a manual contact tracing process. == TraceTogether Token ==

On 7 June 2020, Minister-in-Charge of the Smart Nation Initiative Vivian Balakrishnan announced that the government would be distributing a physical device, named TraceTogether Token, to augment the app. or residents with workplace restriction. The physical token helps to increase the optimal number of users required for the contact tracing system to work well, which was 75% of the population. Upon the announcement of the physical device, there was a public backlash against the physical device initiative, with a petition launched to protest against the development of the device over concerns about potential privacy issues. The Singapore People's Party also released a statement regarding the privacy concerns and about the potential abuse of the data. Similar to the app, the TraceTogether Token utilises BlueTooth to exchange signals with other TraceTogether Tokens or the mobile app. After encrypting the data of what devices or apps are near by, the device stores up to 25 days of information before deletion. A 26 October 2020 report indicated that there was a higher than expected demand after the news of mandatory usage of TraceTogether was released. Authorities also did not expect that residents would travel to different distribution points island-wide to collect the tokens and had suspended collection for a day on 28 October 2020 to rework the distribution strategy. The collection of the token at the community centres could only be made by residents in the respective constituencies, and distribution was done on a rolling basis at the constituency level, with the last remaining community centres reopened for collection only on 23 December 2020. A Straits Times editor, Irene Tham advocated on 30 October 2020 for the tokens to be distributed first and mandate the usage later. Tham also suggested a similar queue system to that of telcos registering customers and assigning time slots could be adopted to avoid overcrowding at the collection points as it was noted that a crowd formed and lasted for a couple of hours at Marsiling Community Centre for a couple of hours even after that distribution strategy was reworked. == Mandatory usage of TraceTogether ==

Downloading, installing, registering the TraceTogether app and scanning in/out using the TraceTogether-only SafeEntry (TT-only SE) has been made mandatory for all Singaporeans and at all places such as cinemas, restaurants, workplaces, schools and shopping malls for contact tracing purposes. This includes the device called SafeEntry Gateway (Check in and check out) to enable users to scan in and out. In addition, TraceTogether also shows vaccination status and pre-event testing (PET) status whether the person test positive or negative for COVID-19. All other methods of checking in through SafeEntry such as either the phone camera, NRIC or Singpass app are all removed since the second lockdown on 17 May 2021. This was effected by requiring customers to show the ‘Covid Health Status’ section of the app or the ‘history’ tab, despite the app data being originally intended only for personal reference. The Singapore Tourism Board subsequently issued a statement that "cruise lines should adhere to the guidance from the MOH and the SNDGO regarding the use of data from the TraceTogether app", while the cruise companies reversed or changed the ban to an advisory "encouraging" affected passengers to postpone their sailing dates. == Scale back and deactivation ==

With the easing of the COVID Omicron wave, the Disease Outbreak Response System Condition was lowered from orange state to yellow state on 26 April 2022. Additionally, the usage of TraceTogether system would be limited to large events with 500 participants, food and beverages outlets, and nightlife entertainment establishments with dancing facilities. The distribution of the tokens was scaled back from 1 July 2022 as the demand for the token fell. On 9 February 2023, authorities announced that the system was no longer required. The public was encouraged to return the tokens at the community centres in a month-long exercise from 13 February 2023. The TraceTogether app (as well as SafeEntry app) could be uninstalled from handphones as well. Authorities had also announced that the data collected through the system was deleted from their servers. == Privacy ==

The BlueTrace protocol is designed to preserve the privacy of user, but in contrast to other implementations, the TraceTogether app is not anonymous as participants have to register using their phone number and national registration number or other evidence of residency. To safeguard participant's mutual privacy and ensuring their control over the data, TraceTogether states that it: • Stores limited data. Data over 25 days old is deleted automatically. When signing up, a random User ID is generated and associated with the mobile number. Both the mobile number and User ID are stored in a secure government server. All data from or about other phones will not be accessed, unless the user has been in close contact with a COVID-19 case and is contacted by the contact tracing team. • Does not collect data about location via GPS or Wi-Fi, however fine-grained location tracking is possible using Bluetooth. TraceTogether uses Bluetooth to approximate distance to other nearby phones running the same app. • Creates temporary IDs that change regularly. • Allows consent revoking via an email to a government agency. If a user opts out, their contact information is deleted from the MOH servers, meaning any log entries they appear can no longer be matched to them. • Prompts disabling TraceTogether's functionality once contact tracing ceases. The main privacy concern relating to the BlueTrace protocol is due to the use of centralised report processing, in which a user must upload their entire contact log to a health authority administered server. This is in contradistinction to decentralised report processing protocols such as the Decentralized Privacy-Preserving Proximity Tracing (DP-3T) protocol. In Parliament on 2 February 2021, it was revealed that the police could request the data after 25 days under certain unspecified exceptions. == Controversy over police access ==

Access under the Criminal Procedure Code On 4 January 2021, Minister of State for Home Affairs Desmond Tan revealed in Parliament that TraceTogether data could be accessed by the police for criminal investigations under the Criminal Procedure Code, which contradicted previous assurances by Minister Balakrishnan and others that the data would be used only for contact tracing. This disclosure followed investigations triggered by an inquiry from a member of the public in October 2020, and the filing of a parliamentary question by MP Christopher de Souza in early December 2020, with the 3-month delay attributed to deliberations over the possibility of excluding TraceTogether data from the Criminal Procedure Code. Access during the May 2020 murder investigation On 5 January 2021, Minister Balakrishnan updated Parliament that the police had to the best of his knowledge by that point in time accessed contact tracing data once in the case of a murder investigation. Following questions from Leader of the Opposition Pritam Singh and Non-Constituency MP Leong Mun Wai, Minister Desmond Tan explained in Parliament on 2 February 2021 that this had happened in May 2020 during the course of the Punggol Field murder investigation, where the police tried to but failed to obtain the TraceTogether data from the suspect Surajsrikan Diwakar Mani Tripathi, who did not install the app in his phone. In the aftermath, Surajsrikan was found guilty of murder and sentenced to life imprisonment with 15 strokes of the cane on 15 September 2022. Reactions There was significant backlash to the announcement, despite Balakrishnan's explanation and acceptance of full responsibility. Following the announcement, some users deleted the app or left the token at home, while others disabled their phone's Bluetooth or selected the “Pause Tracking” function after checking in. In the month of the disclosure (January 2021), 350 people requested that their contact tracing data be erased from the government's servers, with the number increasing to more than 1,100 by April. was updated on 4 January 2021 to include possible access by police officers for investigations. Desmond Tan emphasised that access to TraceTogether data remained restricted without authorisation. In addition, Balakrishnan said that TraceTogether programme will be stood down once the COVID-19 pandemic ends, with epidemiological data given to MOH that does not identify users. The backlash prompted the Government to introduce the COVID-19 (Temporary Measures) (Amendment) Bill on 2 February 2021 formalising the assurances to restrict police access to investigate for seven categories of offences. Additionally, only senior police officers with the rank of inspector and above can request for data in the TraceTogether system, similarly to existing data requests requirements for bank data from financial institutions. == See also ==