AEPD: Processing of personal data in emergency situations. A somewhat philosophical article:
“When collecting data, and in particular personal data, it must be taken into account that not all data will be useful to deal with an emergency. Not only must the relevant and appropriate data categories be selected for the problem to be addressed, but data must also be extracted that is of quality, reliable and proven. That subset of data that actually has value is called information.
It is knowledge that enables appropriate decisions to be made (…). In order to determine what data I need to collect, the first step is to select an optimal action plan of proven effectiveness, evaluating it against other possible options. This selection has to be made based on objective parameters of effectiveness and efficiency according to the available resources and management capacity. This plan has to be led by the body with the will and the competence to execute it, supported by those who can obtain and transmit the knowledge that can be acquired with the necessary information.
The massive and indiscriminate collection of personal data not only fails to comply with the principles of necessity and proportionality, but leads to the generation of noise, aggression against citizens’ rights and freedoms and the risk that such data will end up in the wrong hands which, with a clear plan, resources and sufficient decision, will turn that data against us’.