Tracetogether Token 20210907 091956

TraceTogether is a digital system implemented by the Government of Singapore to facilitate contact tracing efforts in response to the COVID-19 pandemic in Singapore. The main goal is quick identification of persons who may have come into close contact with anyone who has tested positive for COVID-19. The system helps in identifying contacts such as strangers encountered in public one would not otherwise be able to identify or remember. Together with SafeEntry, it allows the identification of specific locations where a spread between close contacts may occur.

Released on 20 March 2020, the system initially consisted only of an app by the same name. However, this was later supplemented by a physical token mainly intended for elderly and children who may not own a smartphone, or those who prefer not to use the app. The app was the first main COVID-19 tracking app released in the world and its development encouraged the development of similar apps in other countries.

The app has raised significant concerns about the privacy of those who use the app, especially due to a lack of decentralised report processing and access to the data by police. However, the app states it has several features to ensure users' privacy, such as regularly rotating users' IDs and storing limited data. Despite the concerns over privacy, the app was slowly adopted by the population of the Singapore, eventually reaching a 92% adoption rate in May 2021. The app is now also mandated for specific groups of people and those attempting to enter certain venues and events.

TraceTogether app

Technology

The app utilises a custom protocol, BlueTrace, which allows for a distributed approach whereby participating devices exchange proximity information whenever an app detects another device with the TraceTogether app installed. The protocol, and reference app implementations of it, were also open sourced as BlueTrace and OpenTrace respectively.

Initial versions of the app required users to register using only their mobile number., with subsequent versions from June 2020 onwards requiring users' NRIC or passport numbers.
The website states that the NRIC number is required in order to allow MOH to reach the right person when they need to give important health advice on COVID-19, and is stored in a secure server, never accessed unless needed for contact tracing, and never shared with other app users.
Further iterations of the app added support for SafeEntry, a national digital check-in system that logs the national identification and mobile numbers of individuals visiting hotspots, workplaces of permitted enterprises, as well as selected public venues. The main goal of SafeEntry helps COVID-19 cases remember the places that they've visited. This helps MOH to identify potential infection clusters and perform cluster COVID-19 testing.

Following installation, the user is requested to grant relevant permissions such as Bluetooth. Android users are additionally required to grant Location permission as Bluetooth can be used to derive location information when combined with beacons in fixed locations.

To trace users the Ministry of Health (MOH) issues time sensitive anonymous temporary IDs that are used to identify the patient to all third parties. When two users of the app pass by, it uses the Bluetooth Relative Signal Strength Indicator (RSSI) readings between devices across time to approximate the proximity and duration of an encounter between two users. This proximity and duration information is stored on one's phone for 25 days on a rolling basis. Once a user tests positive for infection, the MOH works with them to map out their activity for past 14 days and requests the contact log. To facilitate the conduct of contact tracing measure to prevent further outbreak of any infectious disease, the user cannot withhold their contact information log under the Infectious Diseases Act (Chapter 137).

The usage of the app had been limited by the technical limitations of needing to have the application to run in the foreground on iOS devices, and battery drain, but these problems had been reportedly addressed in the 2.1 version of the app released on 3 July 2020, and version 2.1.3 of 5 Aug added informational, work pass and SafeEntry QR features.

Release timeline

The app was released on 20 March 2020, following 8 weeks of development by Singapore's Government Technology Agency in collaboration with Ministry of Health (MOH).

On 10 April 2020, following the lifting of the embargo on the Google-Apple Exposure Notification (GAEN) system, the developers announced that they had been working with Apple and Google on specifications which would allow for cross-border inter-operability, and had begun to incorporate these new APIs into TraceTogether. The developers envisaged this as a way to overcome the app's inability to access full background Bluetooth scanning functionality on iOS devices (which led to the app being active only when it ran in the foreground), and increase the pool of interoperable devices, both of which could have increased the contact tracing utility.

On 5 June 2020, the Minister-in-charge of the Smart Nation Initiative Vivian Balakrishnan acknowledged in Parliament the inability of the TraceTogether app to work well particularly on iOS or Apple devices, and that these had not been overcome despite discussions at the technical and policy level with Apple.
He subsequently explained that the Government had decided against using the Google-Apple Exposure Notification (GAEN) system, citing its inability to "identify how, when and whom the person was infected by or passed the infection to" and "the 'graph' not being available to the contact tracers". Instead, a new portable, wearable device, called the TraceTogether Token would be issued to all 5.7 million residents in order to increase the pool of participants.

On 7 December 2020, market research firm Gartner crowned TraceTogether as the Asia-Pacific winner for its 2020 Government Eye on Innovation award, after the firm had conducted a poll among various government organisations around the world.

Uptake

During the release of the app, Minister for National Development Lawrence Wong, a co-chair of the multi-ministry Covid task force, explained that for TraceTogether to be effective, at least three-quarters – if not everyone – of the population had to install it, and had to turn on their Bluetooth function to ensure the app was running.

On 10 April 2020, approximately 3 weeks after its release, about one million people had downloaded the app, which translated to about one in six of the resident population at the time. This percentage increased to 17% of the population in May 2020.

On 5 June 2020, the Minister-in-charge of the Smart Nation Initiative announced in Parliament that the TraceTogether has been downloaded on a voluntary basis by 1.5 million users, which worked out to only 25 per cent of the population.

By 4 September 2020, about 2.4 million users had downloaded the app, with 1.4 million active users in August.

As of 14 December 2020, following the release of the token, adoption rate of the app and token combined exceeded 60% of Singapore's resident population. Despite falling short of the 70% adoption target that the Government had set loosen restrictions, the Government later announced on the same day the loosening of restrictions to start from 28 December 2020. On 23 December 2020, Balakrishnan revealed that the adoption rate had exceeded 70%.

On 11 May 2021, Balakrishnan revealed that the adoption rate had exceeded 92%, with 4,923,054 individuals aged above six. On 19 January 2022, the Smart Nation and Digital Government Office indicated that "almost all of Singapore's population above the age of six" are using the system. There were about 3,000 users, or 0.056% of the registered users, who deregistered for reasons such as expats leaving the country, people who have died, or people opting out over data security reasons.

Effectiveness

With TraceTogether complementing manual contact tracing effort, the contact tracing teams has improved their efficiency by reducing the time taken to identify and quarantine a close contact from four days to less than two days. More than 10% of close contacts identified by TraceTogether turned positive during quarantine period, the percentage may be low due to Singapore mandating mask-wearing since 14 April 2020. It was reported on 22 April 2021 that TraceTogether system had identified at least 75 persons who had to be placed under quarantine, but would likely not have been picked up through a manual contact tracing process.

TraceTogether Token

On 7 June 2020, Minister-in-Charge of the Smart Nation Initiative Vivian Balakrishnan announced that the government would be distributing a physical device, named TraceTogether Token, to augment the app. The TraceTogether Token is designed primarily to support Singapore residents who do not own a smartphone, mainly some elderly, children aged seven and above or residents with workplace restriction. The physical token helps to increase the optimal number of users required for the contact tracing system to work well, which was 75% of the population. With the issuance of the device, the government aimed to achieve at least 70% of the population using either the TraceTogether Token or app.

Upon the announcement of the physical device, there was a public backlash against the physical device initiative, with a petition launched to protest against the development of the device over concerns about potential privacy issues. The Singapore People's Party also released a statement regarding the privacy concerns and about the potential abuse of the data.

Similar to the app, the TraceTogether Token utilises BlueTooth to exchange signals with other TraceTogether Tokens or the mobile app. After encrypting the data of what devices or apps are near by, the device stores up to 25 days of information before deletion. The device is designed for those who have no smartphone, which consisted of about 5% of the population. It is designed to be waterproof and its battery life is about six months. There are no physical buttons on the device, and it has a green/red light indicator for battery life and/or to indicate a fault. The device does not have GPS functionality, and access to the data remains restricted among the civil service.

The physical device was made available for collection from 14 September 2020.

A 26 October 2020 report indicated that there was a higher than expected demand after the news of mandatory usage of TraceTogether was released. Authorities also did not expect that residents would travel to different distribution points island-wide to collect the tokens and had suspended collection for a day on 28 October 2020 to rework the distribution strategy. The collection of the token at the community centres could only be made by residents in the respective constituencies, and distribution was done on a rolling basis at the constituency level, with the last remaining community centres reopened for collection only on 23 December 2020. A Straits Times editor, Irene Tham advocated on 30 October 2020 for the tokens to be distributed first and mandate the usage later. Tham also suggested a similar queue system to that of telcos registering customers and assigning time slots could be adopted to avoid overcrowding at the collection points as it was noted that a crowd formed and lasted for a couple of hours at Marsiling Community Centre for a couple of hours even after that distribution strategy was reworked.

The distribution strategy would subsequently be changed from manned counter operations to token dispensing vending machines from 31 August 2021 onwards.

Mandatory usage of TraceTogether

Downloading, installing, registering the ''TraceTogether'' app and scanning in/out using the ''TraceTogether-only SafeEntry'' (TT-only SE) has been made mandatory for all Singaporeans and at all places such as cinemas, restaurants, workplaces, schools and shopping malls for contact tracing purposes. These includes the device called SafeEntry Gateway (Check in and check out) to enable users to scan in and out. In addition, TraceTogether also shows vaccination status and pre-event testing (PET) status whether the person test positive or negative for COVID-19.

All other methods of checking in through SafeEntry such as either the phone camera, NRIC or Singpass app are all removed since the second lockdown on 17 May 2021.

Use by commercial organisations to deny access

In early May 2021, some businesses including ComfortDelGro Driving Centre, Royal Caribbean Cruises and Dream Cruises were reported to have denied entry to students and passengers whose TraceTogether app displayed "possible exposure", despite the Ministry of Health (MOH) affirming that such persons were at low risk and not restricted from continuing with their regular activities. This was effected by requiring customers to show the ‘Covid Health Status’ section of the app or the ‘history’ tab, despite the app data being originally intended only for personal reference. The Singapore Tourism Board subsequently issued a statement that "cruise lines should adhere to the guidance from the MOH and the SNDGO regarding the use of data from the TraceTogether app", while the cruise companies reversed or changed the ban to an advisory "encouraging" affected passengers to postpone their sailing dates.

With the easing of the Covid Omicron wave, the Disease Outbreak Response System Condition would be lowered from orange state to yellow state on 26 April 2022. Additionally, the usage of Tracetogether system would be limited to large events with 500 participants, food and beverages outlets, and nightlife entertainment establishments with dancing facilities.

Privacy

The BlueTrace protocol is designed to preserve the privacy of users, but in contrast to other implementations, the TraceTogether app is not anonymous as participants have to register using their phone number and national registration number or other evidence of residency.

To safeguard participant's mutual privacy and ensuring their control over the data, TraceTogether states that it:
* Stores limited data. Data over 25 days old is deleted automatically. When signing up, a random User ID is generated and associated with the mobile number. Both the mobile number and User ID are stored in a secure government server. All data from or about other phones will not be accessed, unless the user has been in close contact with a COVID-19 case and is contacted by the contact tracing team.
* Does not collect data about location via GPS or Wi-Fi, however fine-grained location tracking is possible using Bluetooth. TraceTogether uses Bluetooth to approximate distance to other nearby phones running the same app.
* Creates temporary IDs that change regularly.
* Allows consent revoking via an email to a government agency. If a user opts out, their contact information is deleted from the MOH servers, meaning any log entries they appear can no longer be matched to them.
* Prompts disabling TraceTogether's functionality once contact tracing ceases.

The main privacy concern relating to the BlueTrace protocol is due to the use of centralised report processing, in which a user must upload their entire contact log to a health authority administered server. This is in contradistinction to decentralised report processing protocols such as the Decentralized Privacy-Preserving Proximity Tracing (DP-3T) protocol.

In Parliament on 2 February 2021, it was revealed that the police could request the data after 25 days under certain unspecified exceptions.

Controversy over police access

Access under the Criminal Procedure Code

On 4 January 2021, Minister of State for Home Affairs Desmond Tan revealed in Parliament that TraceTogether data could be accessed by the police for criminal investigations under the Criminal Procedure Code, which contradicted previous assurances by Minister Balakrishnan and others that the data would be used only for contact tracing. This disclosure followed investigations triggered by an inquiry from a member of the public in October 2020, and the filing of a parliamentary question by MP Christopher de Souza in early December 2020, with the 3-month delay attributed to deliberations over the possibility of excluding TraceTogether data from the Criminal Procedure Code.

Access during the May 2020 murder investigation

On 5 January 2021, Minister Balakrishnan updated Parliament that the police had to the best of his knowledge by that point in time accessed contact tracing data once in the case of a murder investigation. Following questions from Leader of the Opposition Pritam Singh and Non-Constituency MP Leong Mun Wai, Minister Desmond Tan explained in Parliament on 2 February 2021 that this had happened in May 2020 during the course of the Punggol Field murder investigation, where the police tried to but failed to obtain the TraceTogether data from the suspect Surajsrikan Diwakar Mani Tripathi, who did not install the app in his phone. In the aftermath, Surajsrikan was found guilty of murder and sentenced to life imprisonment with 15 strokes of the cane on 15 September 2022.

Reactions

There was significant backlash to the announcement, despite Balakrishnan's explanation and acceptance of full responsibility. Some observers attributed this to the fact that the clarification was made 9 months after the data had already been used, and only in response to direct and repeated parliamentary questioning. Privacy concerns were raised by various experts with former Nominated Member of Parliament and Associate Professor of Law Eugene Tan saying that "the news came across as the Government backtracking on its earlier assurance that TraceTogether would only be used for contact tracing" and "clearly undermines their trust and credibility, and could undermine its future efforts .... to keep COVID-19 under control".

Following the announcement, some users deleted the app or left the token at home, while others disabled their phone's Bluetooth or selected the “Pause Tracking” function after checking in. In the month of the disclosure (January 2021), 350 people requested that their contact tracing data be erased from the government's servers, with the number increasing to more than 1,100 by April.

The original TraceTogether privacy statement was updated on 4 January 2021 to include possible access by police officers for investigations.

Various officials provided reassurances. Balakrishnan explained that this situation was not unique to TraceTogether and that under the same law, other forms of sensitive data like phone or banking records could also have their privacy regulations overruled. Desmond Tan emphasised that access to TraceTogether data remained restricted without authorisation. This point was reiterated by K Shanmugam, who said that the police will restrict the use of TraceTogether to "very serious offences" like murder and terrorism, only after careful consideration and discretion. In addition, Balakrishnan said that TraceTogether programme will be stood down once the COVID-19 pandemic ends, with epidemiological data given to MOH that does not identify users.

The backlash prompted the Government to introduce the ''COVID-19 (Temporary Measures) (Amendment) Bill'' on 2 February 2021 formalising the assurances to restrict police access to investigate for seven categories of offences. Additionally, only senior police officers with the rank of inspector and above can request for data in the TraceTogether system, similarly to existing data requests requirements for bank data from financial institutions. The Bill was debated among the Members of Parliament from People's Action Party, Workers' Party (WP), and Progress Singapore Party (PSP), with members from opposition WP preferring not to use the data but support a bill to restrict, and PSP opposing the use of data. The Bill was passed by the end of the session.

Singapore's reversal of initial promises regarding police access to TraceTogether data was cited as one of the reasons for resistance to the Hong Kong's COVID-19 contact-tracing application, LeaveHomeSafe.

See also

* SafeEntry

Notes

References

{{COVID-19 pandemic in Singapore

2020 establishments in Singapore
Healthcare in Singapore
Government software
2020 software
Android (operating system) software
IOS software
COVID-19 contact tracing apps
Data laws
COVID-19 pandemic in Singapore