A Guide to Navigating Cybersecurity, Privacy, and Employment Law Issues with COVID-19 Contact Tracing in the Private Sector

As the United States and other countries gradually ease stay-at-home orders and mandatory lockdowns, data-driven technologies have become increasingly discussed as a potential strategy for tracing and mitigating the further spread of the COVID-19 virus. While these emerging technologies can serve a variety of pandemic response purposes, one use is to automate contact tracing through mobile applications, wearable devices, and other tracking technologies to complement other efforts to safely reopen the economy.

The use of digital contact-tracing solutions within business enterprises raises a variety of privacy, cybersecurity, and employment law issues organizations cannot afford to overlook. This White Paper provides a practical, high-level overview of the digital technologies proposed for contact tracing in the private sector; identifies potential cybersecurity, privacy, and employment law concerns that may arise in connection with deploying these technologies; and summarizes some of the legislative proposals to address these concerns.

Read the full White Paper.

Insights by Jones Day should not be construed as legal advice on any specific facts or circumstances. The contents are intended for general information purposes only and may not be quoted or referred to in any other publication or proceeding without the prior written consent of the Firm, to be given or withheld at our discretion. To request permission to reprint or reuse any of our Insights, please use our “Contact Us” form, which can be found on our website at This Insight is not intended to create, and neither publication nor receipt of it constitutes, an attorney-client relationship. The views set forth herein are the personal views of the authors and do not necessarily reflect those of the Firm.