https://tech.newstatesman.com/policy/edpb-coronavirus-mobile-data-eprivacy-directive

The European Union’s committee of data protection regulators has clarified that national governments will need to lay down new laws if they wish to use mobile data to track the spread of the coronavirus outbreak.

In a statement issued on Monday (16 March), the European Data Protection Board (EDPB) said that if public authorities want to use mobile location data to carry out contact-tracing – in the same way that Israel controversially plans to, and Taiwan already has – doing so would currently be unlawful under the ePrivacy Directive.