Containing the COVID-19 pandemic necessitates the use of personal information without the consent of the person. The protection of
personal information is fundamental to the rights that ensure an open and democratic society. When regulations that limit the right to
privacy are issued outside of the democratic process, every effort must be made to protect personal information and privacy. The limitation
of human rights must be treated as an exception to the norm, and any regulations should be drafted to ensure minimum limitation of rights,
rather than to the minimum acceptable standard. The contact tracing regulations included in the COVID-19 disaster regulations include
some basic principles to ensure privacy; however, other important principles are not addressed. These include principles of transparency and
data security. The envisaged future use of human data for research purposes, albeit de-identified, needs to be addressed by the COVID-19
designated judge appointed under the regulations.