https://tech.newstatesman.com/coronavirus/nhsx-tracing-app-data-privacy-risks-are-low-according-to-the-people-who-made-it

The NHS has updated the data protection impact assessment (DPIA) for its coronavirus contact-tracing app to include a formerly redacted ‘risks’ section. It scores itself a self-congratulatory low-to-medium risk on all the potential privacy issues raised, indicating that NHSX doesn’t need to seek further ICO consultation on the app.

According to the DPIA, the greatest privacy risks faced by the app – although still assigned a benign shade of amber – are “malicious or hypochondriac” false symptom reporting and children accessing the app and plugging in incorrect symptoms. This would result in people receiving incorrect alerts that they’d been in contact with someone experiencing coronavirus symptoms.