<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta content="text/html;charset=UTF-8" http-equiv="Content-Type"></head><body ><div style="font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10pt;"><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">Hello Roland,<br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""> <br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">You raise an interesting set of questions and I will admit that when it comes to the “ins-and-outs” of GDPR and HIPPA compliance, I am probably not as well versed as yourself or our attorneys. That being said, we at ViraTrace have from the very beginning sought to ensure that the products we develop for automated contact tracing are the most secure and privacy-protective on the market.<span class="Apple-converted-space"> </span><br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""> <br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">As you may be aware from your work with TraceTogether, there is a large percentage of the populations across the globe who object to the concept of automated contact tracing. These objections are generally centered around privacy. Here in the United States, everyone is concerned with government eavesdropping and monitoring – they think that by using an automated contact tracing application they are providing the government with a means to track their day-to-day activities and to glean nefarious insights into that data. This is of course an oversimplification of the issues, but I believe it is nonetheless a powerful one.<span class="Apple-converted-space"> </span><br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""> <br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">My co-founders are citizens of former Eastern Bloc countries and these concerns are just as real for them as they are for everyone else, if not more so. Their countries are seeking to release automated contact tracing applications which have little to no privacy protections for users and then to make these applications mandatory, and this has led to backlash from the population. Although some of this is a result of rampant political corruption, a large portion of it is the result of a lack of knowledge on how to release something that is more secure and privacy-centric. This provided an opening for ViraTrace to engage in ongoing negotiations with these governments to develop and maintain an automated contact tracing solution.<span class="Apple-converted-space"> </span><br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""> <br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">The solutions and frameworks we have developed are designed from the ground-up to ensure end-users that their data is safe and that automated contact tracing is confidential, private and secure from governmental intrusion.<br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""> <br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">Thus far, we have developed:<span class="Apple-converted-space"> </span><br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""> <br></p><p style="text-indent:-.25in;mso-list:l0 level1 lfo1" class="MsoListParagraphCxSpFirst"><span style="mso-bidi-font-family:Calibri;mso-bidi-theme-font:minor-latin"><span style="mso-list:Ignore">1)<span style="font:7.0pt "Times New Roman""> <span class="Apple-converted-space"> </span></span></span></span>A cross-platform mobile application.<br></p><p style="text-indent:-.25in;mso-list:l0 level1 lfo1" class="MsoListParagraphCxSpMiddle"><span style="mso-bidi-font-family:Calibri;mso-bidi-theme-font:minor-latin"><span style="mso-list:Ignore">2)<span style="font:7.0pt "Times New Roman""> <span class="Apple-converted-space"> </span></span></span></span>A cross-platform BLE/GPS/WiFi-based<span class="Apple-converted-space"> </span><span> </span>device-to-device communications protocol for use in third-party automated contact tracing applications.<br></p><p style="text-indent:-.25in;mso-list:l0 level1 lfo1" class="MsoListParagraphCxSpMiddle"><span style="mso-bidi-font-family:Calibri;mso-bidi-theme-font:minor-latin"><span style="mso-list:Ignore">3)<span style="font:7.0pt "Times New Roman""> <span class="Apple-converted-space"> </span></span></span></span>A secure, delay tolerant communications protocol for device-to-secure enclave communications.<br></p><p style="text-indent:-.25in;mso-list:l0 level1 lfo1" class="MsoListParagraphCxSpMiddle"><span style="mso-bidi-font-family:Calibri;mso-bidi-theme-font:minor-latin"><span style="mso-list:Ignore">4)<span style="font:7.0pt "Times New Roman""> <span class="Apple-converted-space"> </span></span></span></span>A second-generation mutli-node propogation infection model which utilizes distributed simulations to determine infection risk for users. This model has been peer reviewed by professors at Oxford and University of Torino and proven to be 85% more effective than other models and has already been deployed to over 150+ million users via the Aarogya Setu app.<br></p><p style="text-indent:-.25in;mso-list:l0 level1 lfo1" class="MsoListParagraphCxSpMiddle"><span style="mso-bidi-font-family:Calibri;mso-bidi-theme-font:minor-latin"><span style="mso-list:Ignore">5)<span style="font:7.0pt "Times New Roman""> <span class="Apple-converted-space"> </span></span></span></span>A secure enclave processing environment which is designed to strip confidential data obtained from the infection model and our communications protocol and output a cleansed and sanitized data set for analysis.<br></p><p style="text-indent:-.25in;mso-list:l0 level1 lfo1" class="MsoListParagraphCxSpLast"><span style="mso-bidi-font-family:Calibri;mso-bidi-theme-font:minor-latin"><span style="mso-list:Ignore">6)<span style="font:7.0pt "Times New Roman""> <span class="Apple-converted-space"> </span></span></span></span>A web dashboard which allows government health workers to utilize the cleansed and sanitized data set and communicate anonymously with end users.<span class="Apple-converted-space"> </span><br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""> <br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">We have released (or are planning to release) each and every one of these technologies as open source for implementation by anyone developing contact tracing platforms. Because of the nature of each component being separate and designed to operate independently, there are a number of potential data privacy violations that could be introduced by downstream developers.<span class="Apple-converted-space"> </span><br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""> <br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">As the maintainer and inventor of the underlying technologies, ViraTrace believe we are responsible for ensuring that data privacy violations are not introduced and that end users of automated contact tracing applications enjoy a<span> <span class="Apple-converted-space"> </span></span>consistent level of data security and privacy.<br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""> <br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">This brings me to your specific question regarding software license terms as an element of compliance.<span class="Apple-converted-space"> </span><br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""> <br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">Our software is used as a means of processing data that is protected by GDPR and HIPPA.<span class="Apple-converted-space"> </span><br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">It is the position of ViraTrace that as a maintainer and inventor of these underlying technologies, the only way we can ensure a consistent level of data security and privacy for end users is to include provisions within our license that provide for oversight consistent with our goals.<span class="Apple-converted-space"> </span><br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""> <br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">The software we have, are and will release under the proposed license has undergone stringent legal review for both HIPPA and GDPR compliance in terms of automated contact tracing applications. It has been determined to be fully compliant with both regulations by the Information Commissioner’s Office for the EU and the Attorney General’s Office of the United States.<span class="Apple-converted-space"> </span><br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""> <br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">By including the provisions at issue within our license, we ensure that we remain responsible for legal compliance with data privacy regulations and that end users have a central point of contact for questions or concerns regardless of where or how, or by whom the technology is deployed.<br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""> <br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">Our review process as specified for in the proposed license is used to review the modifications and implementation of our software source code and to determine if it meets compliance standards at every point in a developer’s implementation. If it does not, the license provides a process by which the developer must rectify the deficiencies or withdraw the software from the market upon license termination.<span class="Apple-converted-space"> </span><br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""> <br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">Although one could argue that it is the responsibility of the party deploying the automated contact tracing solution to comply with data privacy regulations in the means you describe, we fully believe that it is our responsibility to the end users, as the maintainer and inventor of the underlying technologies used for data processing, to ensure that the software we provide and that is deployed based<span class="Apple-converted-space"> </span><span> </span>on our technologies remains fully compliant with GDPR and HIPPA.<br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">We would acknowledge that this is not normal practice within the industry, but neither is it precluded.<span class="Apple-converted-space"> </span><br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""> <br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">Hopefully that helps answer questions. If not, you can of course respond within this thread or if you have other questions or comments, you may contact me directly at the number/email within my signature below.<br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""> <br></p><p style="margin: 0px; font-size: medium; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">Best to you and yours.<br></p><style>/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-unhide:no;
mso-style-qformat:yes;
mso-style-parent:"";
margin:0in;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Calibri",sans-serif;
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Calibri;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
mso-style-unhide:no;
mso-style-qformat:yes;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
mso-add-space:auto;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Calibri",sans-serif;
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Calibri;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
p.MsoListParagraphCxSpFirst, li.MsoListParagraphCxSpFirst, div.MsoListParagraphCxSpFirst
{mso-style-priority:34;
mso-style-unhide:no;
mso-style-qformat:yes;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
mso-add-space:auto;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Calibri",sans-serif;
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Calibri;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
p.MsoListParagraphCxSpMiddle, li.MsoListParagraphCxSpMiddle, div.MsoListParagraphCxSpMiddle
{mso-style-priority:34;
mso-style-unhide:no;
mso-style-qformat:yes;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
mso-add-space:auto;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Calibri",sans-serif;
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Calibri;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
p.MsoListParagraphCxSpLast, li.MsoListParagraphCxSpLast, div.MsoListParagraphCxSpLast
{mso-style-priority:34;
mso-style-unhide:no;
mso-style-qformat:yes;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
mso-add-space:auto;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Calibri",sans-serif;
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Calibri;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
.MsoChpDefault
{mso-style-type:export-only;
mso-default-props:yes;
font-family:"Calibri",sans-serif;
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Calibri;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;
mso-header-margin:.5in;
mso-footer-margin:.5in;
mso-paper-source:0;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:672218128;
mso-list-type:hybrid;
mso-list-template-ids:1030620914 67698705 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-text:"%1\)";
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}<br></style><br><div data-zbluepencil-ignore="true" id="Zm-_Id_-Sgn"><div><span class="highlight" style="background-color:rgb(255, 255, 255)"><span class="colour" style="color:rgb(0, 0, 0)"><span class="font" style="font-family:Verdana, Arial, Helvetica, sans-serif"><span class="size" style="font-size: 13.333333px; font-style: normal; font-weight: normal; letter-spacing: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none; float: none;">Regards,</span></span></span></span><br></div><div><br></div><p style="margin: 0px; font-style: normal; font-weight: normal; letter-spacing: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none" class=""><span class="colour" style="color:rgb(0, 0, 0)"><span class="font" style="font-family:Calibri, sans-serif"><span class="size" style="font-size: 11pt; margin: 0px; font-style: normal; font-weight: normal; letter-spacing: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none;"><span class="colour" style="color:black"><span class="font" style="font-family:verdana, sans-serif"><span class="size" style="font-size:13.333333px">Wayne M. Thornton, B.S., CPDT<br>Co-Founder & Project Manager<br>VIRATRACE©<br>720-766-0254 – Direct</span></span></span></span></span></span></p><p style="margin: 0px; font-style: normal; font-weight: normal; letter-spacing: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none" class=""><span class="colour" style="color:rgb(0, 0, 0)"><span class="font" style="font-family:Calibri, sans-serif"><span class="size" style="font-size: 11pt; margin: 0px; font-style: normal; font-weight: normal; letter-spacing: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none;"><span class="colour" style="color:black"><span class="colour" style="color:rgb(5, 99, 193)"><span class="font" style="font-family:verdana, sans-serif"><span class="size" style="font-size:13.333333px"><a style="color: rgb(89, 143, 222); cursor: pointer" href="https://www.viratrace.org/" target="_blank">https://www.viratrace.o</a>rg</span></span></span></span><br></span></span></span></p><div style="color: rgb(0, 0, 0); font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 13.333333px; font-style: normal; font-weight: normal; letter-spacing: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none"><span class="colour" style="color:black"><span class="colour" style="color:rgb(5, 99, 193)"><span class="font" style="font-family:verdana, sans-serif"><span class="size" style="font-size:13.333333px"></span></span></span><span class="font" style="font-family:verdana, sans-serif"><span class="size" style="font-size:13.333333px"><br>Be sure to join our </span></span><a style="color: rgb(89, 143, 222); cursor: pointer" href="https://teams.microsoft.com/join/lw83179ktnqf" target="_blank"><span class="colour" style="color:rgb(5, 99, 193)"><span class="font" style="font-family:verdana, sans-serif"><span class="size" style="font-size:13.333333px">Microsoft Teams</span></span></span></a><span class="font" style="font-family:verdana, sans-serif"><span class="size" style="font-size:13.333333px"> channel for updates and to contribute!<br><br>This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, please note that you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail. Thank you.</span></span></span></div></div><br><div style="border-top-width: 1px; border-top-style: solid; border-top-color: rgb(204, 204, 204); height: 0px; margin-top: 10px; margin-bottom: 10px; line-height: 0px;" class="zmail_extra_hr"><br></div><div style="" data-zbluepencil-ignore="true" class="zmail_extra"><br><div id="Zm-_Id_-Sgn1">---- On Thu, 10 Dec 2020 20:39:10 -0700 <b>Roland Turner <roland@rolandturner.com></b> wrote ----<br></div><br><blockquote style="margin: 0px;"><div><div class="x_953516192moz-cite-prefix">Hi Wayne,<br></div><div class="x_953516192moz-cite-prefix"><br></div><blockquote><div style="font-family: Verdana, Arial, Helvetica, sans-serif;font-size: 10.0pt;"><div>First, regarding rationale: Our company is in the business
of creating frameworks and software products which facilitate
automated contact tracing initiatives across the globe. These
frameworks and products must be GDPR- and HIPPA-compliant and
have been designed to be such, with strict, ongoing legal
review processes undertaken to ensure this. The frameworks and
products that we create are designed to be utilized by
governmental agencies and private corporations in the creation
of applications and platforms which aid in the fight against
COVID-19 and future pandemic scenarios. In order for this to
be of benefit, the frameworks and software we develop must be
open source, so that the governmental agencies and private
corporations can be free to utilize them. Unfortunately, due
to the legal compliance issues vis-a-vis GDPR and HIPPA, a
level of control regarding development must be maintained. It
is our position that the GNU and other OSI-approved licenses
do not provide this level of control. <br></div></div></blockquote><p>Others are addressing the appearance of a profound
incompatibility between what you're proposing ("free to utilise"
vs. "level of control [by Viratrace]") and the Open Source
Definition.<br></p><p>I'm interested in the concept of software license terms as an
element of GDPR compliance. Can you explain how you see license
terms being a relevant part of this? It is my understanding that
data protection law in most jurisdictions is about the legal
obligations of organisations in control of personal data both with
respect to that data and to people that it relates to (and often
to regulators), and legal/contractual obligations of other
organisations processing that data on their behalf; software
licensors are not part of the picture. As neither Viratrace nor
likely licensees would be looking to establish a
controller/processor relationship[1] through the license, the
relevance is not immediately clear to me.<br></p><p>(For a sense of where I'm coming from:<br></p><ul><li>Although this is my first ever post to license-review, I've
been involved in open-source license advocacy for rather a long
time. It was I who initially proposed late last century (!) a
multi-license approach for Mozilla.<br></li><li>I serve as Chief Privacy Officer for my employer — a
specialist processor of personal data — and in that capacity
have assisted customers with data protection obligations across
a dozen jurisdictions on four continents.<br></li><li>Although the specific concerns of Free Software are largely
out of scope here, I am an advocate of the approach and have
spoken in public about the overlapping objectives of Software
Freedom and of GDPR data subject rights.<br></li><li>I am tangentially involved in Singapore's TraceTogether
program as an independent expert, both on the technology and on
personal data protection.<br></li><li>I am working on a design for a system to extend TraceTogether
which coincidentally also uses secure enclaves, although for a
much simpler purpose that the one that you appear to be
pursuing.)<br></li></ul><p><br></p><p>- Roland<br></p><p><br></p><p>1: nor the analogous relationships in other jurisdictions<br></p><p><br></p></div></blockquote></div><div><br></div></div><br></body></html>