Benchmark Your Company’s Handling of Personal Data. Click here for your free Privacy Grade. Read more about PrivacyGrader in our recent TechCrunch coverage.



Threat Exposure Notification Protocol

Introducing the Threat Exposure Notification Protocol (TENP), a new standard for data sharing across contact tracing applications, data providers, public health institutions and policymakers.

arrow icon



Three Pressing Unmet Needs

Consumer Adoption

As the medical experts have informed us, contact tracing requires >50% adoption by the general population to succeed. Multiple apps result in fragmented data sets that aren’t dense enough individually to address the general challenge.

The Oligarchy

While Apple and Google are to be commended for their effort to tackle the problem, the privacy regulations that came into being during the last several years (GDPR, CCPA, etc) were hatched precisely because of the extremely valid concerns governments and citizens had about ceding too much of our personal data to a still-mostly-unregulated oligarchy. If we don’t get this right now, there could be serious post-crisis consequences.

Citizen Control

All current solutions are reactive in nature—they alert after-the-fact, rather than enabling citizens and employees to proactively query contact tracing services to assess their personal health risks.

Ketch’s Framework for Exposure Notification Meets Three Core Imperatives

Threat Exposure Notification Protocol

While Google and Apple SDK empower individual applications, they don’t address the fragmentation of data across various contact tracing applications.

To unify data signals quickly enough to thwart a recurrence of COVID-19 or future pandemics, TENP enables multiple applications to seamlessly communicate and share data, with security and privacy for citizens.

Citizen Control

Citizens deserve greater power and control than they are afforded currently.

If users have been contributing proximity data to an exposure notification app, they should retain the Right to Be Forgotten, govern the purposes for which their data is used, and explicitly withhold that data from authoritarian states. Moreover, developers need a solution for privacy compliance and data security that enables them to automatically, and with technical assurance, enforce citizen control and permission without having to rewrite their existing systems for managing patient data.

Privacy Standard

Researchers and authorities need more than just proximity data to better understand the pandemic.

Enriching proximity data with testing and other health data will enable better assessment of the virus’s trajectory and individuals’ likelihood of contraction. In a high-urgency environment, hospitals and the FDA don’t have time to conduct randomized clinical trials the way they normally do to assess the efficacy of a particular drug or treatment. Recipients of these treatments should be able to contribute health and response data to help find a cure faster, but with a privacy guarantee that no one’s taking liberties with their data.

Want to Learn More?

Schedule a demo to learn how Ketch can help your organization with data privacy.