The present report has been prepared pursuant to Human Rights Council resolution 46/16. 

In the context of the coronavirus disease (COVID-19) pandemic, data were collected from millions of people in all countries of the world for one sole purpose: to combat the pandemic. Although the principles of purpose and time limitation (which require personal data to be deleted from databases once the purpose has been achieved) are incorporated in national and international regulations on personal data processing, the following questions have nonetheless arisen: What will happen to the personal data collected from these millions of people for the purpose of combating the COVID-19 pandemic? Will they be deleted? Will they be anonymized? Will they be used for purposes other than those for which they were collected? 

The Special Rapporteur on the right to privacy, Ana Brian Nougrères, envisages that the review forming the basis of this report might serve as a call on States to ensure timely application of the principles of purpose limitation, deletion of data and demonstrated accountability (also referred to as proactive accountability) in respect of the personal data that were collected from millions of persons in the context of the pandemic.