Measures to Prevent Personal Information from TraceTogether Usage from Being Hacked
- Gan Thiam Poh asked about the risks of personal information from TraceTogether being hacked and the measures to prevent such attacks.
- Mrs Josephine Teo explained that TraceTogether data is encrypted, stored locally on devices, and deleted after 25 days, with uploads to government servers only when legally required.
- Measures include encrypted databases, field-level encryption or hashing of identifiers, logged and monitored access, and annual penetration testing of systems.
- The COVID-19 (Temporary Measures) Act imposes penalties of up to $20,000 fine or two years’ imprisonment for unauthorized disclosure or misuse of contact tracing data.