Skip to content

The Curious Case of LUCA Data and the German Police

Article by Tsaaro

7 min read

 

German authorities came under fire for their use of a COVID contact tracing tool to investigate a case.The app LUCA  has been plagued by cybersecurity, data protection and even copyright infringement issues since its initial deployment in March 2021, leading to a strong joint statement against its use by hundreds of IT experts.

The instance demonstrates data protection specialists’ concerns. Politicians have cautioned that it plays into the hands of opposition organizations that vehemently oppose all pandemic curbs and express doubt about COVID vaccinations.

What happened?

The incident concerns authorities in the city of Mainz. At the end of November, a man fell to his death after leaving a restaurant in the city, prompting police to open a case.

While trying to track down witnesses, police, and prosecutors managed to successfully petition local health authorities to release data from the Luca app, which logs how long people stayed at an establishment.

Authorities then reached out to 21 potential witnesses based on the data they had unlawfully acquired from the app. The case’s reports, which surfaced last week, prompted considerable outrage.

In a statement, Mainz public prosecutors said they’ve begun an investigation and are working to ensure “that the relevant data will not be exploited further.

To date, no additional examples have been reported in which authorities were able to obtain data from the app in order to conduct investigations.

What does the app do?

The Luca app works by logging the amount of time that patrons spent at a restaurant, bar, or cultural event. Users enter their personal information into the app. They can then scan a QR code at a restaurant or event and log out when they leave.

In the event that someone tests positive for COVID-19, local health authorities can more easily identify and alert people who may have been exposed to the virus.

The use of the Luca app and others like it have relieved some of the paperwork burdens for restaurants, bars, and event organizers — who, in the early stages of the pandemic, were required to have customers write down their contact details on pieces of paper.

The app is also subject to Germany’s strict data protection laws. The only way to retrieve the data is if the local health department and the establishment both give their consent to unencrypt the personal data.

Once it is no longer encrypted, only local health departments are permitted to have access to the personal details of the patrons. Furthermore, the data can only be used in the event of chasing a potential infection chain.

What has the response been?

The app’s developers, culture4life, sharply criticized the actions of authorities in Mainz.

We condemn the abuse of Luca data collected to protect against infections,” the company said in a statement.

Culture4life added that it receives frequent requests for its data from law enforcement — but those requests are routinely denied. Members of Germany’s ruling coalition, which comprises the Social Democrats, Greens, and Free Democrats, have also voiced concern over the case.

Konstantin von Notz, a senior member of the Greens, warned that abuse of the app could undermine public trust and hamper efforts to stem rising COVID-19 cases.

Luca is governed by Germany’s strong data protection laws, which state that information from the app cannot be accessed by non-health authorities or utilized in criminal proceedings.

Despite the fact that there was “no legal basis to do so,” the Mainz public prosecutor’s office confirmed that officers used the Luca app to issue the data inquiry.

It expressed “regret” for the occurrence and promised that such information would no longer be used by police. It said that a preliminary inquiry into the use of the Luca app had not turned up any additional instances of the software being abused.

Is this the first time?

Authorities in Germany aren’t the first to use information collected from coronavirus tracing applications in criminal investigations.

Last year, officials in Singapore admitted to using data from the country’s TraceTogether app in a homicide inquiry, despite the country’s lax privacy regulations. While using applications like Luca is largely optional in Europe, in Singapore, TraceTogether is mandatory to obtain access to many eateries and office buildings.

In response to the uproar, Singaporean officials revised the app’s privacy statement and modified legislation to make it clear that the data might be utilised in a serious criminal investigation. The government of the Southeast Asian state has agreed to discontinue using the app after the pandemic has passed.

55 thoughts on “The Curious Case of LUCA Data and the German Police”

  1. The next time I read a blog, Hopefully it doesn’t disappoint me as much as this one. I mean, I know it was my choice to read, nonetheless I actually believed you would have something useful to talk about. All I hear is a bunch of crying about something that you could fix if you were not too busy searching for attention.

  2. This is the right website for anybody who wants to find out about this topic. You realize a whole lot its almost tough to argue with you (not that I actually will need to…HaHa). You certainly put a brand new spin on a topic which has been written about for a long time. Wonderful stuff, just wonderful.

  3. Having read this I thought it was very enlightening. I appreciate you spending some time and effort to put this information together. I once again find myself personally spending a significant amount of time both reading and posting comments. But so what, it was still worthwhile!

  4. Hi there, There’s no doubt that your site may be having internet browser compatibility problems. Whenever I take a look at your web site in Safari, it looks fine however when opening in IE, it has some overlapping issues. I just wanted to provide you with a quick heads up! Apart from that, excellent site.

  5. I blog frequently and I seriously thank you for your content. This article has really peaked my interest. I’m going to take a note of your website and keep checking for new information about once a week. I opted in for your Feed too.

  6. Aw, this was a very nice post. Taking the time and actual effort to generate a great article… but what can I say… I put things off a whole lot and don’t manage to get nearly anything done.

  7. Oh my goodness! Awesome article dude! Thank you, However I am going through troubles with your RSS. I don’t know why I cannot subscribe to it. Is there anybody else having identical RSS problems? Anyone who knows the answer will you kindly respond? Thanx!!

  8. Hi there! I could have sworn I’ve been to your blog before but after browsing through some of the posts I realized it’s new to me. Regardless, I’m certainly pleased I discovered it and I’ll be book-marking it and checking back frequently!

  9. Next time I read a blog, Hopefully it does not disappoint me as much as this particular one. After all, I know it was my choice to read, but I truly believed you would probably have something helpful to say. All I hear is a bunch of complaining about something that you could possibly fix if you were not too busy seeking attention.

  10. When I initially left a comment I appear to have clicked on the -Notify me when new comments are added- checkbox and from now on every time a comment is added I get 4 emails with the exact same comment. Perhaps there is an easy method you can remove me from that service? Appreciate it.

  11. Having read this I thought it was extremely informative. I appreciate you spending some time and effort to put this content together. I once again find myself personally spending a lot of time both reading and commenting. But so what, it was still worth it.

  12. You are so interesting! I do not think I’ve truly read anything like this before. So wonderful to discover another person with some original thoughts on this subject. Really.. thank you for starting this up. This site is something that is needed on the web, someone with a bit of originality.

  13. After exploring a few of the articles on your website, I really appreciate your technique of writing a blog. I bookmarked it to my bookmark webpage list and will be checking back soon. Take a look at my website as well and tell me how you feel.

  14. Hey! Do you know if they make any plugins to help with SEO?
    I’m trying to get my website to rank for some targeted keywords but I’m not seeing very good results.
    If you know of any please share. Cheers! I saw similar
    blog here: Wool product

  15. I really love your blog.. Great colors & theme. Did you develop this amazing site yourself? Please reply back as I’m planning to create my very own blog and want to find out where you got this from or what the theme is named. Thanks!

  16. Hi, I do believe this is an excellent blog. I stumbledupon it 😉 I may return once again since I bookmarked it. Money and freedom is the greatest way to change, may you be rich and continue to guide others.

  17. Having read this I believed it was rather enlightening. I appreciate you taking the time and effort to put this content together. I once again find myself spending a lot of time both reading and commenting. But so what, it was still worth it.

  18. Having read this I thought it was rather enlightening. I appreciate you spending some time and energy to put this short article together. I once again find myself spending a significant amount of time both reading and commenting. But so what, it was still worth it!

  19. Oh my goodness! Awesome article dude! Thank you so much, However I am experiencing troubles with your RSS. I don’t know the reason why I am unable to subscribe to it. Is there anybody getting similar RSS problems? Anyone who knows the answer can you kindly respond? Thanx!!

  20. When I originally commented I appear to have clicked the -Notify me when new comments are added- checkbox and now whenever a comment is added I get 4 emails with the exact same comment. Perhaps there is a means you are able to remove me from that service? Thank you.

  21. Spot on with this write-up, I absolutely think this amazing site needs much more attention. I’ll probably be back again to read more, thanks for the advice.

  22. Sugar Defender Official Website Uncovering Sugar Defender has actually been a game-changer for me, as I’ve constantly been vigilant
    about handling my blood sugar degrees. With this supplement,
    I really feel encouraged to take charge of my health and wellness, and
    my most recent medical check-ups have shown a significant turn-around.
    Having a reliable ally in my corner supplies me with a sense of security
    and peace of mind, and I’m deeply happy for the profound difference
    Sugar Protector has actually made in my health.

  23. I’d like to thank you for the efforts you have put in writing this website. I am hoping to see the same high-grade content by you in the future as well. In fact, your creative writing abilities has motivated me to get my very own website now 😉

  24. I’m impressed, I have to admit. Rarely do I encounter a blog that’s both educative and amusing, and let me tell you, you have hit the nail on the head. The issue is something too few men and women are speaking intelligently about. I am very happy I stumbled across this during my search for something concerning this.

  25. Having read this I thought it was rather enlightening. I appreciate you taking the time and energy to put this informative article together. I once again find myself personally spending a significant amount of time both reading and commenting. But so what, it was still worth it.

Comments are closed.

Tsaaro Consulting

The evolving digital landscape in the 21st century have placed a challenge for governments and organizations as they attempt to …

Tsaaro Consulting

Introduction  The Digital Personal Data Protection (DPDP) Act, 2023, and the Digital Personal Data Protection Rules, 2025 establish a comprehensive …

Tsaaro Consulting

In today’s interconnected world, cybersecurity plays a crucial role in protecting our digital lives. From protecting personal data to safeguarding …

Tsaaro Consulting

Introduction  A Transfer Impact Assessment (TIA) is a critical evaluation conducted under the General Data Protection Regulation (GDPR) to assess …

Tsaaro Consulting

Introduction The Digital Personal Data Protection Act (DPDPA), 2023 and the Draft DPDP Rules, 2025 have ushered in a new …

Recent Comments

SHARE THIS POST

Would you like to read regular updates from Tsaaro.
Subscribe to our newsletter

Our Latest Blogs

Read what the latest hapennings in the cyber world are and learn what the
experts have to say about them

Call Our Experts:

+91 95577 22103

small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png
small_c_popup.png

We’d love to help your organization achieve your Data Protection goals!

Schedule a complimentary consultation with our Team of Experts.